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Coping With COMPUTIST 



Welcome to COMPUTIST, a publication 
devoted to the serious user of Apple ][ and 
Apple ][ compatible computers. Our magazine 
contains information you are not likely to find 
in any of the other major journals dedicated to 
the Apple market. 

New readers are advised to read this page 
carefully to avoid frustration when attempting 
to follow a softkey or when entering the 
programs printed in this issue. 

■ What Is A Softkey Anyway? Softkey is 
a term which we coined to describe a procedure 
that removes, or at least circumvents, any copy- 
protection on a pitrticular disk. Once a softkey 
procedure has been performed, the resulting 
disk can usually be copied by the use of Apple's 
COPYA program (on the DOS 3.3 System 
Master Disk). 

■ Commands And Controls: In any article 
appearing in COMPUTIST. commands which 
a reader is required to perform arc set apart by 
being in boldface and indented; 

PR#6 



The IbeturnI key must be pressed at the end of 
every such command unless otherwise 
specified. 
Control characters are specially boxed: 

Press S- Next, place one finger on fCT'^LJ 
and press (E- Rememb er to enter this 
command line by pressing I^jftubhI . 

■ Requirements: COMPUTIST programs 
and softkeys require one of the Apple ][ series 
of computers and a disk drive with DOS 3.3. 
These and other special needs are listed at the 
beginning of the article under "Requirements". 

■ Software Recommendations: 

1} Applesoft Program Editor such as Global 
Program Line Editor (GPLE). 

2} Seaor Editor such as DiskEdit (from the 
Book of Softkeys vol I) or ZAP from Bag of 
Tricks. 

3) Disk Search Utility such as The 
Inspector. The CIA or The CORE Disk 
Searcher (from the Book of Softkeys vol III) . 

4) Assembler such as the S-C Assembler 
from S-C software or Merlm/Big Mac. 

5) Bit Copy Program such as Copy ] [ Plus , 
Locksmith or The Essential Data Duplicator 

6) Text Editor (that produces normal 
.sequential text files) such as Applcwriter 11, 
Magic Window U or Screenwriter IL 

COPYA, FID and MUFFIN from the DOS 
3.3 System Master Disk are also useful. 

■ Super lOB: This powerful deprotection 
utility (COMPUTIST 32) and its various 
controllers are u.sed in many softkeys. This 
utility is now available on each Super FOB 
Collection disk. 

■ RESET Into The Monitor: Softkeys 
occasionally require the user to stop the 
execution of a copy-protected program and 
directly enter the Apple's system monitor. 
Check the following list to see what hardware 
you will need to obtain this ability. 



Apple Jl Plus - Apple lie - Apple compat shies: 
1) Place an Integer BASIC ROM card in one 
of the Apple slots. 2) Use a non-maskable 
interrupt (NMI) card such as Replay or 
Wildcard. 

Apple If Plus - Apple compatibles: 1) Install 
an F8 ROM with a modified RESET vector on 
the computer's motherboard as detailed in the 
"Modified ROM's" article (COMPUTIST 6 
or Book Of Softkeys IE) or the "Dual ROM's" 
article (COMPUTIST 19). 

Apple He - Apple //c: Install a modified CD 
ROM on the computer's motherboard. Cutting 
Edge Em. (Box 43234 Ren Cen Station-HC; 
Detroit, MI 48243) sells a hardware device 
that will give you this important ability but h 
will void an Apple .'.'c warranty. 

■ Recommended Literature: The Apple ][ 
Reference Manual and DOS 3.3 manual are 
musts for any serious Apple user. Other helpful 
books include: Beneath Apple DOS. Don Worth 
and Pietcr Lechncr, Quality Software; Assentbly 
Language For The Applesoft Programmer, Roy 
Meyers and C W. Finley, Addison Wesley; and 
What's Where In The Apple. William Luben, 
Micro Ink. 

■ Keying In Applesoft Programs: BASIC 
programs are printed in COMPUTIST in a 
format that is designed to minimize errors for 
readers who key in these programs. If you type: 

ieHOME:REMCLEAR SCREEN 
The LIST will look like: 

Ift HOME : REM CLEAR SCREEN 

because Applesoft inserts spaces into a program 
listing before and after every command word 
or matliematieal operator, These spaces usually 
don't pose a problem except in line numbers 
which contain REM or DATA commands. 
There are two types of spaces: those that have 
to be keyed and those that don't. Spaces that 
must be keyed in appear in COMPUTIST as 
deUa characters C ). All other spaces are there 
for easier reading, NOTE: If you want your 
checksums (See "Computing Checksums" 
section) to match up, you must only key m 
(' ) spaces after DATA statements. 

■ Keying In Hexdumps: Machine language 
programs are printed in COMPUTIST as both 
.source code and hexdumps, Hexdumps arc the 
shortest and easiest format to type in. You must 
first enter the monitor: 

CALL -151 

Key in the hexdump exactly as it appears in 
the magazine, ignoring the four-digit checksum 
at the end of each line (a "$" and four digits). 
A beep means you have typed somediing that 
the monitor didn't understand and must, 
therefore, retype that line. 

When finished, return to BASIC with: 

EM3G 

BSA VE the program with the correct fdcname, 
address and length parameters given in the 
article, 

■ Keying In Source Code The source code 
is printed to help explain a program's operation. 
To key it in, you will need the S-C Assembler. 



Without this assembler, you will have to 
translate pieces of the source code into 
something your assembler will understand. A 
table of S-C Assembler directives appears in 
COMPUTIST 17. 

■ Computing Checksums Checksums are 
four-digit hexadecimal numbers which tell if 
you keyed a program exactly as it appears in 
COMPUTIST. There are two types of 
checksums: one created by the CHECKBIN 
program (for machine language programs) and 
the other created by the CHECKSOFT program 
(for BASIC programs). Goth appeared in 
COMPUTIST 1 and The Best of Hardcore 
Computing. An update to CHECKSOFT 
appeared in COMPUTIST 18. If the published 
checksums do not match those created by your 
computer, then you typed the program 
incorrectly , The line where the first checksum 
differs has an error, 

■ CHECKSOFT Instructions: 

LOAD filename 
BRUNCHECKSOFT 



Get the checksums with: & |ret'jrn1 and correct 
the program where the checksums differ, 
■ CHECKBIN Instructions: 

CALL -151 

BLOAD program filename 

Install CHECKBIN at an out of the way place 

BRUN CHECKBIN,A$6»WI 

Get the checksums by typing the starting 
address, a peri od and ending address of the file 
followed by a ES [HM) • 

XXX.KXX lOYI 

Correct the lines at which the checksums differ. 
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You have a LEGAL RIGHT 
to an unlocked backup copy 

Ouf editorial policy La that we do NOT comJone 
aoftware piracy, but wo do bot^e that Li3er» are entitled 
to backup commerdai dl^s they have purohaaed. in 
addition to the security of a backup diak, the femovai 
of copyprotection gives the user the option of 
modifying programa to meet hft or her nied»< 

Furthermore, the copyright iawa guarantee your 
right to such a DEPROTECTED backup copy: 

,."Il m nai an inrrLngeinent for the owner of a copy of a 

conipult^r program to mikc or aullvonzc Ehc maJung of anodvcr 
copy or adaptalwn of that ctimputer prLi^rgm pruviJol: 

L ) diat wch a visv, tojn' or adti^ucm i^ LiriitEctJ 'i^ an c^ksenLial 
>iEcp in the Li[ili/j[iLirt of the comRuifr pro^Tam m coniunction with 
a machme and thas it is used in no other nnanncr, (ir 

2j that such JifEw copy or adaptation is. for archival purposes 
only and [hat aLI aR-hival copies are ^kstroyed m the evetil thai 
coniinued posseiiiion of the iftimpuicr prograiti ilioulJl ctase lo 
be rightful. 

Any exact copies prepared tn accordance wtth the provisions 
of this section may be leawd, sifiid, or iKherwise traniftntd, aiong 
with the cypy fvom whiizh such lopics were prepared, ttnJy ai part 
of the lea«, iale. or other sransfcr of all rights in the program. 
Adaplalions so preparetJi may be trans Icrred only with the 
auihoniaiion of the copvrighi owner." 

Vmifd Siiiies Cmle iiilr 11. \U1 lU USC ill) 



Be assured of receiving the latest issue of COMPUTIST each month 

without the hassle of making a trek to the local computer store and not finding 

COMPUTIST so of course you ask the clerk if they have COMPUTIST and they tell you they dt>n't carry 

COMPUTISTbut maybt; you could try the computer store down the block because they might have an issue of 

COMPUTIST j^ you go to [lie compult:r slorc down ihc block and ask Ihcni if ihey have COMPLTIST but of course they don'l I ihey \nu ran out of 

COMPtJTISTygstefdav i so you riJe your unjcycle clear acrusa to^'n to ^et? it Lhe cumpuler store across tcmn has COMPUTIST bui ^'hen you gi3 icistilg and aik i'at 
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COMPUTIST. ihcs Jon'c h^^c COMPUTIST cttlK'i' ami ^ui^i^tii ihac •.om ir> Jic sLOfc \oiJ on^imtltv *i:n[ lo tti the tirsi plui:e sd- |;a hcHfh: ijisgiisiixl thai vipu nii^yxL unucbCT twuct^fCOMPL'TTST. 

Can1 Find COMPUTIST Anywhere? 

stop searching and subscribe now! 

Annual subscription rates (12 issues): 

U.S. Subscriptions - sent third class - $32 
U.S. /Canada/Mexico - sent First Class - $45 
U.S./Canada/Mexico First Class PLUS library disk - $100 

All other Foreign Subscriptions - $75 

All other Foreign PLUS library disk - $140 



■ Use the form on the right to order 
or renew your subscription. 

Mag & Disk Combo 

■You may upgrade your current 
subscription to a magazine & disk 
combination by sending $5.50 ($6.50 
foreign) per remaining issue. 

1$ it time to renew? 

■ Check your mailing label to see if 
you need to renew your subscription. 

Are you moving soon? 

■ If you're moving, let us know at 
least 30 days in advance. 

Issues missed due to non-reciept of 
Change-of-Address may be acquired 
at the regular back issue rates. 

Remember, the Post Office does not 
forward third class mail unless 
requested. 

COI^PUTIST is not responsible for 
replacing issues lost while forwarding 
order is in effect. 



Yes, I want to .subw,Tibe to COMPLTIST. 
Enclosed are funds fur an annual 112 iaiiUt:] !subscription. 

I am D A new Suhwriber 

D Renevfin^ my current ifubscription 

C Changijig niv addre^ (please include late<>t label) 

I L'.S. - $32 

_ I'. S.. 'Canada 'Me.vk'u First Class - S45 

Z L.S./Canada'Mexicn First Cla.ss plu,s Library Disk - $100 

[. All other Foreign - $75 

E All uther Foreign plus Library Disk - $140 
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Address 
City 



state 



Zip 



Country ,- 



Signature 



Phone 



Exp 
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U.S. Funds drawn on L.S. bank. Please aiiovv 4 to S weeks for subscnprlon to commence, 
Mail lo: CO.MPITIST PO Bux n0846-T Tacoma, VVA 98411 or phone 1:06) 474-5750 



Take time now to save time iater! 



Editorial 



■ RDEX 

Well, eveo'one's had time to ret-eive COMPUTIST 47 and check out the ntw format. 1 hope 
you like RDEX as much as I. We've really only ju.st begun to use the real strength (timelines.s) 
of this new format. 

In diis issue you'll fmd a lot more softkeys, some submitted within the last 30 days. There are 
softkeys for Ilgs programs and PR{iDOS. You'll also find repeats on some .softkeys. We can't 
verify the subtnissiotis so duplicates will be printed as long as diere is some variation in the method 
used. 

All of RDEX is unpaid material sent by readers to help other readers . Some ol the material 
are previously submitted manuscripts that were donated when the authors learned of our problems. 
I'd like to thank those writers who responded so quickly to our letters. You'll find a lot of your 
material in this issue. If you sent a manuscript and haven't received an acknowledgement, hang- 
on a little longer. There is still a tall .stack of letters sitting on my desk. 



I Hardware Corner 

There is another installment of the Hardware Comer on page 40. A flashing light gizmo that's 
functional as well as impressive to watch. Bobby says there's a lot more where that came from 
The direction of Hardware Corner is still up in the air. We need some reader input on what kind 
of hardware you would like to see. 



I Letters on disk 

I'd like to make a plea to all our readers. If you send a letter or note to RDEX that is longer 
than one page, please send it on disk. It's a lot easier to transfer to the typesetter and improves 
your chances of getting into the next issue. 

I Don't send any original commercial software 

If you do send in softkeys, please, whatever you do. don't send any original disks. There are 
too many people coming and going around here and your origmals may get lost. 



Help! We need more local volunteers 



We could use some more volunteer help. Are there any local .subscribers who would like to 
do some editing or programming work? We're in desparate need of comp«tisis who can type quickly 
and accurately. If you volunteer, you'll learn a lot about publishing a magazine. 



I Most Wanted 

We've received numerous queries about the whereabouts of the most wanted list. It was lost 
in the shuffle, but we found it again, it's kind of dusty and way out of date but we're going to 
print it anyway. Write us if you see any errors or have any updates. 



C Thanks to all of you for your support. 

I'd like to thank all of the volunteers who sat up nights putting together COMPUTIST 4B. 

Charles R. Haighi 
Publisher/Editor 
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6 Softkey for... Apple Business Graphics 

by Rich Etarip 

E Dungeon Editor % Encounter Editor 

by Jim S. Han 

Twn more A P.T utilities for \aur Ultima ill jdvcmuring pleasure. 

/^ Softkey for... Shadowkeep 

hy Christopher Dean 

IE Use Your Sector Editor To Master Shadowkeep's Dangers 

by Christopher Dean 

This A.P T. fur Trill iums Shadowkeep fantasy roie-playlng game requires a sector-editor, Use 
the lahles to alter your character and any object-danger in the game. 

40 Hardware Corner part II: A Real Time Activity Monitor 

bs Bobhv 



20 Readers Data Exchange 

Softkey s: software title (page #| 

•816 Paint GS- 2 1 • Addition Logician— 34 • Amnesia— 3\ • .irctic Far— 31 .36 • Award Maker 
Phis-21 'Bard's Tale //-33,39 * Better,vorkmg Word Processor— IX * Beyond Castle 
Wolfenstein—3& • Black Magic— 3 1 • Bookends Extended— 32 • Bop & Wrestle— 37 • Chess 
7.0—22 • *Chess!msier 2M0—35i * Counting CritJers-34 • Deluxe Paint G5— 21 • DestToyer~31 

• Hacker //-20.38 • Hardhall-25 • liifiltrator-13 • Instant Music G5-20 • J-Bird-36 • - 
Mubefs Mansioii~23 • Marble Madne.^s— 32,35 • Math Critters— 34 • Mean J 8 GS Golf— 20 

• Megahots-24 • Might & Magic-3] * Miner 2049er 11-31 • Mouse Word— 21 * Music 
Construction Set GS—2 1 • Music Studio GS— 20.39 • New Oregon Trail— 26 • Paint works Plus 
05-20,30.38 • Paul Whitehead Teaches Chess -26 • PHM Pegasus-36 • Pieman-3^ • Poetry 
Expres.s—?4 • Print .Shop color version— 2 1 • Quotient Qite.it— 34 * Rambo First Blood part 11—25 

• Rocky Horror Show-3b • *Sargon 111-35 • Shanghai G5-20.2L39 • Spindizzy-2l ,2^ • - 
TL'lePoner—24 * Temple Of Apshai trilogy- 37 * Top Draw GS— 21 * Transylvania— 37 • Ultima 
1—22 • World's Greatest Baseball Gartw— 25 • Writing A Character Sketch— 34 • Writing A 
Narative- 34 

N: notes .4Kr: Advanced Playing Techniques A: adventure Tips BUG: mispsrtnis-€rrors 

• N: Megabots— 24 • APT: Uliima IV-IS, 3U • APT: Aztec-28 • N: Elite softkey— 29 • N; 
Fantavision sojkey 32 * BUG: Auto Duel softkey— 33 • N: Goonies 5aftkey—33 • A: 
Bureaucracy— 33 • A: King 's Quest— 33 
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Softker for. 



Apple 
Business Graphics 



Apple Computers, Inc. 



by Rich Eta rip 



B Requirement's: 

C 64K Apple 

C A blank disk 

C A sector editor 

C COPYA (on DOS 3.3 System Master) 

D Apple Busine.w Graphics diskette 

When I was given the chance to irj to 
deprotect Apple Bu.^inesx Graphics, 1 almost 
declined it. I told myself that it would probably 
be a lost cause as tar as deprotcction not only 
because it had been on COMPUTIST"S Most 
Wanted List tor ahxiut the past 30 issues, but 
also that it was protected by Apple Computer 
themselves. One point I failed to reali/e was 
that this was a 1981 release and back then, copy 
protection schemes were not quite as advanced 
and complex as they are UKlay. 

The Apple Business Graphics package 
includes 4 diskettes: 

I The program disk called Apple Business 
Graphics Plot 
1 A backup copy of the program disk 

3 A data diskette which is not protected 

4 A blank diskette 

Apple Business Graphics Plot 

The disk we will be working with wdl be the 
program diskette: Apple Business Graphics 
Plot. 

Tlie disk itself is easily copyable e.vcept for 
Track 1 which even today's bit copiers have 
problems copying. Right then 1 thought 1 knew 
what I was looking for. All I had to do was 
search the disk for accesses to SC08C which 
is die address to read a byte from die disk. From 
there. I could easily find the nibble-count 
routine and defeat it. The problem is that I 
couldn't find a nibble-count routine anywhere. 

The ne.Kt thing I did was remove the cover 
from my disk drive so 1 could watch the drive 
head. Then I booted up the copy I made. 1 
couldn't even make a guess as to when Track 
1 was accessed because it was going all over 
the place and continually shding back to Track 
0. My guess was that Track 1 was accessed a 
numtier of times during boot. 

Then I booted the original diskette and 
listened to the disk drive. I had only booted up 



the original once before and this time I noticed 
somethmg thji I had tailed to notice before. 

.'Almost right before the title page comes up, 
the disk drive recalibrates. However, on the 
copy 1 made, it doesn't That made me think 
of a game I had deproiected a couple of years 
ago. It was copyable except for one track and 
unle.ss it encountered an error in reading that 
track, it would not work. In order to tlnd out 
if this was the same case, 1 copied a protected 
Track I from one of my game disks to the copy 
oi Apple Business Graphics and sure enough 
it worked fine. 

Apple Business Graphics must encounter a 
read error on Track 1 or it will not work 
correctly. It would be simple to just make a 
copy of the disk and then copy a protected track 
to Track ] but we aren't going to bother doing 
that for a working hack up copy. 

My aim is not lo find ways around the 
protection, but to REMOVE the protection. 
You can easily make copies of the disk with a 
copier that ignores errors (such as the iMcksmiih 
I'ast Disk Backup) and when you boot the 
copied diskette, it will appear to boot fine hut 
once it gets past the title screen it gives a PLOT: 
NOT ON LINE error. The reason it doesn't 
work is because of the check to Track 1. 

What we have lo do is tlnd out where it reads 
from 'frack 1 . Their disk loading routine is 
stored in the language card at SDHW) and this 
can be found on Track 2 of the disk. 

Take a look at Listing 1 which is a small 
section of their loader, Ai SDI8E is a JSR 
SD324 followed by a BCS SO 183. By trial and 
error. 1 found this to be where the read error 
from Track I is detected. If the carry Hag is 
.set (Branch if Carry Set) upon return from the 
subroutine at SD324, that means that there was 
a read error. 

If you look at Listing 2 you will see that 
SD324 is the routine to read the address field 
from the disk. If no read errors (x:cur, the carry' 
bit will be cleared, but if it does encounter an 
error, the carry will be ,set. 

We are going to have to fool the loader into 
thinking it has run into an error when it reads 
Track 1 . In other words, the carry bit must be 
set when returning Irom the JSK SD324 at 
$D18E. We could change the CLC (CLear 
Carry ) at tUSTH to a SEC (SEt Carry ) but ii 
wouldn't work correctly. 

keniembcr, the routine at SD324 is used for 
reading all tracks from the disk and if we do 
that, it will think that there was an error on 
every track. The carrv hit must be set ONL\ 



after reading Track I . By further e.xamination. 
1 found that die current track to be read is stored 
in S3A4. It IS basically simple now. Check if 
$3.A4 is SOI. and if h is, set the carry bit so 
i! thinks there was an error in reading Track I . 

I kxiked tlirough memory for available space 
to write a routine and SDFO0 appcred to have 
just 'garbage' memory so I cleared out the page 
(which is on Track 2 Sector F) and booted the 
disk and it worked tine. 

.Next. I wrote a shon routine at 5DF00 to 
cause an crr<ir on Track 1 and tried the copy. 
It appeared to work fine until it started using 
the data disk and user disk. Then 1 was getting 
errors. The problem here was that the routine 
! wrote was not only causing errors on Track 
I of the program disk but any Track 1 it tries 
to read or write. 

1 had a simple solution lo that problem 
though. I simply mtxHficd my routine to store 
an RTS at the beginning of itself after the error 
was checked on Track 1 and the routine could 
not he used anymore. I then booted the disk 
again and tried it oui. This time it appeared to 
work fine up until I exiled the disk format 
section . It then went to load the main program 
in again and ii also checked for Track I again 
and since my routine was no longer useable, 
it crashed right there. Once again I knew' what 
1 had 10 do. Find out where it begins reading 
ihc program disk and remove the RTS that I 
stored at the beginning of my routine earlier. 

Well, 1 spent endless hours looking through 
the code, making changes trying lo find out 
where the load begins. No luck at all. The code 
for the loader was very complex and difficult 
10 Irace and after a while, 1 finally gave up on 
that idea. It appears ihal ihey u.se a different 
routine to load in the program the second time 
around and I couldn't find it anywhere. 

fhcrc was only one question running through 
my mind al the tinie. "What is ihe easiest way 
to tell two disks apart when you are reading 
from them,'" I kept asking myself thai for quite 
a while and finally it hit me. It was so easy, 
and all thi.s lime ( never even thought about it. 

All I ha\e to do is copy the prograjii disk with 
an odd volume number that neither of the other 
disks would contain and then check for that. 
That way, 1 can call my routine right after the 
address field is read (which contains Volume, 
Track, Sector and Checksum) and verify that 
the volume is 5 before causing an error on 
Track I. As mentioned earlier, the routine to 
read the address field is at SD324 and the JSR 
SD324 IS at SDIKE. We will change this to a 
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JSR SDFM and al SDFM, JSR to SD324 and 
ihcn check ihc volume number [which will be 
in Iwation SCD). Then if the volume is 5. check 
the track (which is in locadon S3A4 or SCCl 
and if it is a SOI, sei the earn' and return so 
it thinks that there was a read error. This is what 
the routine wdl look like: 



DFM- JSR $D324 

DF03- LDA JCD 
DFfls- CMP #i05 
OF07- BN£ J0R2 
am- LDA J03A4 
CMP #501 
8fJESDFI2 
SEC 



OF0C 

DFOE 
DFIO 



DFIl- 
DF12- 
DF13- 



RTS 
CLC 
RTS 



-Read an address field 
-Get the '.icIurTie number 
-Is the valume 05? 
-Mo Branch to exit . 
-Get the track nufliber 
-Is the Tracft V 
-No . Branch to ex 1 1 , 
-It IS Track 1 of the 
program disx. Set the 
carry flag to show there 
was an error. 
-Returp to cal ler 
-No error Clear carry 
-Return to cal ler 



Before anything else can be done, though, 
the disk must be copied with COPYA. We will 
modifj it 10 ignore the errors on Track I and 
to write back with a volume of 5. 

The Ljocksmiih Fast Disk Backup will not 
work for this because it will not ehange the 
volume number. 

The Deprotection 



vr3i 



.oad COPYA and COPY.OBJS 



from your system master diskette. 

LOAD COPYA 
BLOAD COPY.OBJD 



v^n 



Etelete line 78 so it does not reload 



COPY.OBJ0. 
71 

I_5 I Now make a modification so it 

writes to the duplicate disk with a volume of 5. 

247 POKE 714.5 



Next, enter the monitor. 



CAU-151 



Make 



modification to 



COPY.OBJ0 so it will Ignore any errors it 
encounters. 

3A1:18 



[ZZI 



Modify DOS so it does not 
recalibrate the drive upon error. If this is not 
done, you will have an awfully noisy copying 
process. 

BOD4:4C 44 BE 



l_Z I Exit back to BASIC. 

fscl 



Finally, type RUN to run the copy 
program and follow the instructions until the 
copying is finished. 



l_® I All that is left is making the sector 

edits to the disk. First, read Track 2 Sector F 
and enter the following at byte SM. This is the 
routine that goes at SUFOfl to check for the 
volume and track. Once this is entered, rewrite 
the sector. 






2d 24 D3 A5 CO C9 05 D0 
09 AD A4 03 C9 01 D0 02 
38 60 18 60 



lO 



Now read Track 3 Sector E and at 
bvte $KF change the $24 and SD.l to a SW) and 
SDF which Will change the JSR $D324 to a JSR 
$DF0O. Write the sector back to the disk. 

And that's all there Is to it. You now have 
a copy able version o{ Apple Bu.tiiieii Graphics. 

Nole: One thing I should point out it. if you 
wish to make copies of your new backup, you 
must use a copier iliat copies the volume 
number. 



Listing 1 



D17E- 


A0 


80 




LDY 


#S80 


DI80- 


8C 


F£ 


DF 


STY 


SDFFE 


0283- 


CE 


FE 


OF 


DEC 


SDFFE 


0186- 


30 


20 




BMI 


SDIAS 


Dise- 


20 


01 


D0 


JSR 


SD001 


D18B- 


AE 


Al 


03 


LDX 


Sa3Al 


D18E- 


4C 


24 


D3 


JHP 


S0324 


D191- 


Be 


F0 




BCS 


SD183 


D193- 


A5 


CC 




LDA 


SCO 


D195- 


CO 


FB 


DF 


CMP 


SQFFB 


D198- 


F0 


38 




BEQ 


S01D2 


D19A- 


A4 


C7 




LOY 


JC7 


D19C- 


0A 






ASL 




D190- 


99 


78 


04 


STA 


50478. y 


DlAfl- 


AO 


FB 


DF 


LOA 


SDFFB 


D1A3- 


CE 


FD 


DF 


DEC 


SDFFD 


D1A6- 


D0 


IB 




BfJE 


SD1C3 


D1A8- 


CE 


FF 


DF 


OEC 


SOFFF 


DIAB- 


F0 


IC 




BEQ 


SD1C9 


DIAD- 


AD 


FB 


DF 


LDA 


SDFFB 


D1B0- 


48 






PHA 




DiBl- 


A9 


0A 




LDA 


#S0A 


01B3- 


80 


FD 


DF 


STA 


SDFFD 


D1B6- 


A9 


60 




LDA 


#$50 


D1B8- 


A4 


C7 




LDY 


SC7 


DIBA- 


99 


78 


04 


STA 


$0478. Y 


DIBD- 


A9 


00 




LDA 


#$00 


D16F- 


20 


6B 


32 


JSR 


$D263 


D1C2- 


58 






PLA 




D1C3- 


20 


6B 


D2 


JSR 


$DZ6B 


Dice- 


IC 


7E 


Dl 


JMP 


$D17E 


01C9- 


A9 


40 




LDA 


#540 


OICB- 


28 






PLP 




OICC- 


4C 


59 


D2 


JMP 


$0259 


DICF- 


4C 


57 


D2 


JMP 


$0257 


D1D2- 


AD 


A3 


03 


LDA 


$0EA3 


D1D5- 


48 






PHA 




DID6- 


As 


CO 




LOA 


SCO 


D1D8- 


8D 


AE 


03 


STA 


$03AE 


01D6- 


68 






PLA 




DIEF- 


00 






BftK 





Listing 2 



D324- 


A0 


FC 




LOY 


#SFC 


0326- 


84 


CF 




STY 


$CF 


0328- 


C8 






INY 




D329- 


Dfl 


04 




BNE 


$D32F 


D32B- 


E5 


CF 




INC 


SCF 


D32D- 


F0 


51 




BEQ 


ID380 


D32F- 


60 


8C 


CO 


LOA 


$C08C X 


D332- 


10 


FB 




BPL 


SD32F 


D334- 


C9 


D5 




CMP 


^$05 


D335- 


D0 


F0 




BNE 


SD328 


D338- 


EA 






NOP 




D339- 


BO 


80 C0 


LDA 


SCD8C.X 


D33C- 


10 


FB 




BPL 


SD339 


033E- 


C9 


AA 




CMP 


#SAA 


0340- 


DS 


F2 




BNE 


SD334 


D342- 


A0 03 




LDY 


#S@3 


0344- 


BD 


EC C0 


LDA 


$C08C X 


0347- 


10 FB 




BPL 


$D344 


D349- 


C9 


96 




CMP 


#S96 


D34B- 


Dfl 


E7 




BNE 


$0334 


D34D- 


A9 


00 




LDA 


#S00 


D34F- 


85 


CE 




STA 


$CE 


D351- 


BD 


SO 


C0 


LDA 


$C08C.X 


0354- 


10 


FB 




BPL 


SD351 


0356- 


2A 






ROL 




D357- 


85 


CF 




STA 


SCF 


D359- 


BD 8C 


C0 


LDA 


SC08C,X 


D35C- 


10 


FE 




BPL 


SD359 


035E- 


25 


CF 




AND 


SCF 


D360- 


99 


CA 


00 


STA 


S0OCA,Y 


D363- 


45 


CE 




EOfi 


SCE 


D365- 


88 






OEY 




D366- 


18 


E7 




BPL 


SD3tF 


0368- 


Afi 






TAY 




0369- 


D0 


15 




BNE 


SD380 


D36fi- 


BO 


8C C0 


LDA 


SC08C,X 


036E- 


12 


FB 




BPL 


SD36B 


0370- 


C9 


DE 




CMP 


#SDE 


0372- 


00 


0C 




BNE 


SD380 


0374- 


EA 






NOP 




D375- 


BD 


SO 


C0 


LDA 


$C08C,X 


D378- 


10 


FB 




BPL 


$0375 


D37A- 


09 


AA 




CMP 


#SAA 


D37C- 


00 


02 




BNE 


SD380 


D37E- 


18 






CLC 




DE7F- 


60 






RTS 




D380- 


38 






SEC 




D381- 


60 






RTS 
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More A.P.T, Utilities For... 



Ultima 
111 

Origin Systems 



Dungeon 
Editor 



by Jim S. Hart 



■ Requirements: 

D Uhima III 

D An initialized disk 

C A copy of your scenario disk 



you have just fmishef) BAnlinq i 
seneqaifie qpoup of ihitves. ii was a 
touGh Eatile eut youR pactv manaqei) 
10 qet away with no majOR losses, you 
now invtniORy what the rauty has left 
anfi OiscovcR that the thieves mafie off 
with A UE^e pecceniaqe of youR qo!&! 
the only way to qet it Back quickly an& 
with a minimum of Risk is to qo inio one 
of Sosauia's 6unci€ons. Which one? the 
one Bv the mam ostle ha5 some, or was 
It the one m the southwest cocnes of 
the continent? you seem to Recall that 
some of tne Gold was haR& to cei to or 
was on the oppRessive 8th level, 
hmmm. What Co you to? 

this Bilemma need nev€R happen to 
you anvmoRe fOR I puesent two of my 
CRcations: 

the Ultima 111... 

Csunqeon eOiiOR mb 
encounxep e^itop 



The Dun get) n Editor will allow you to 
reshape the way the dungeons look. Want to 
make ihc first level all gold chests? You tan, 
now. 

Want to make it so that you can travel from 
level to level without having to follow the 
passages to find the ladders? It's easy to put 
two-way ladders anywhere you want to now. 

You can "personalize" and customize them 
anyway you want. 

As an extra added bonus, the Encounter 
Editor lets you alter the appearance of the 
several different encounters you meet in the 
dungeons such as The Time Lord, The Shrine. 
The Hot Rod of Marki, and The Fountain This 
has no practical use but again, you can 
"customize" it to meet your fancy, For me, 
this makes the game more enjoyable. 

Keying In the Programs 

There are three programs to be entered: 
1 ^ I The Dungeon Editor 
L? I The Encounter Editor 

I ^ I a small machine language program 

to facilitate reading and writing to the disk 

called Sector Zap. 

The editors are written in grwxl ol* Applesoft 

BASIC and Sector Zap is written in machine 

language- 
First, type in listing #1 and save it to disk 

with the command: 

SAVE lU.DUNGEON.EDITOR 

Now type in listing #2 and save it to disk: 
SAVE ni.ENCOUNTER.EDITOR 

Finally, enter the m{mitor. type in the 
hexdump using the procedure outlined on the 
inside front cover of this magzine. 

Save it to disk with: 

BSAVE SECTOR.ZAP, AS3M, LSZl 



The Programs 

The BASIC programs are well documented 
so altering them should nut be loo much of a 
problem. Each section of code is marked off 
by REM statements that explain what it docs. 
The two sections of code thai may be of interest 
to programmers are the cursor bar subroutine 
and the cursor movement routine. 



Cursor Bar from Beagle Bros. 

The cursor bar routine is a modified and 
adapted section of code from one of the Beagle 
Bros flyers. When I saw it. 1 knew this was what 
1 wanted to use in my editing programs. 

The routine itself has been modified to allow 
It to use the entire screen, not just rows 7 to 
1 1 , and have a programmable ESCape key 
function, A short example is needed to 
demonstrate this. 

Suppose you have 4 items in die menu. Using 
the arrow keys, you can move among and 
highlight the 4 choices When you press 
RETURN , the number of the choice highlighted 
will be returned in the variable ZK, i.e, choice 
#3 returns ZK = 3. 



Programmable ESC-key 

However, if you want to allow the user to 
go back a screen and do not want lo add a "GO 
BACK ONE SCREEN" menu option to every 
menu, then use the ESC key for this function. 
When die ESC key is pressed, a value of -1 is 
put into ZK. This can be cheeked for quite 
easily. You can make the ESC: key perform any 
function this way. 

By the way. the only two keys that get you 
out of the cursor bar routine are the RETURN 
and the ESC keys. 

Here is a list of the variables you will need 
to set prior to calling the cursor bar subroutine 
if you plan to use it in one of your programs: 
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<& 



Encounter 
EcQior 



Values Upun Entry; 



ZV = Veri ical *op of menu 
ZH = Hofironta- left of menu 
Z2 = ( of Urns in this rrenu 
Zl = Hhich menu m inenii array 



Value Upon Exit: 

ZH = ■! of menu 



1 tern selected 

(-1 I* ESC was used) 



The first thing to do is to figure out where 
on the screen that >our menu (left justified) is 
going to reside. Now find out what the VTAB 
and HTAB values are for the uppermost left 
character. The VTAB value goes into variahle 
7V The HTAB value goes into variable ZH. 
The number of items that are in this particular 
menu goes into the variable Z2. This subroutttK 
was designed to be used by more than one 
menu. Therefore, the menues are stored in the 
array ZM$( # of menu , items in menu ). The 
number of the menu that is to be displayed goes 
into the variable ZI. When die user makes a 
choice, the variable ZK will hold the number 
of the menu item that they chose (eg. if they 
chose item #4 then ZK=4), As noted before, 
the ESC key gives a value of • I and can be used 
for any purpose. If it is not going to be used, 
a check should be made for it. If it was pressed 
(ZK = -I), then go back to the line that 
originally ealled the subroutine to begin with. 

To sec hou all of this works, examine the 
programs themselves and try them out. 

Cursor Movement 

The section of code that governs the 
movernent of the cursor on the editing screen 
may be of some interest to the readers . These 
few hnes allow the user to move around the 
editing screen using the "UKM" diamond. 

The cursor has a wrap-around feature - if you 
go off the top, you will appear in the same 
column at the bottom. The same goes for 
horizontal movement except you are either 



raised or dropped one depending on which way 
you are going. This cursor movement can be 
thought of a.s what would be used on a single 
screen text editor. 

A FAST Endless FOR-NEXT Loop 

Some of you may already have noticed the 
endless FOR-NEXT loop in the program that 
starts ■•FOR LOOP = 1 TO 2 .STEP 0". 

Why set up an endless loop? Spi'ed! 

When your programs start to grow in size, 
you immediately look for two things: a way to 
compact or nnxJularize the code, and a way to 
Speed up execution. 

An endless lot>p, like the one in the program, 
speeds up execution of a block of repeating ctxic 
like the editing screen because no GOTOs are 
used to return to the sian of the loop. Hence, 
Applesoft dtx's not have to go hunting through 
a lot of line numbers to find the one > ou want. 
This saves time. 

The wav you get out of the loop is to change 
the value of LOOP so that it etjuals or exceeds 
the loop limit which in this case is two (2l. Try 
out an endless loop in your spare time to get 
a feel for it. Who knows, you may use one in 
your next submission to COMPUTIST. 

Faster Citde VS Compact Code 

Compacting and speeding up executing time 
do not always work hand in liaiid. 

In the editing screen loop, there is a subloop 
which checks to see if the user has entered in 
a key to change one on-screen item to another, 
such as replacing a section of lava with water. 
The check goes through a string which contains 
the legal keypresses and if a match is found, 
the appropriate actiim is taken. 

1 originally used a long series of IF-THEN 
statements to accomplish this. When the code 
was rewritten to make it shorter, 1 found that 
the execution speed had diminished. This goes 
to show that good programming does not 
necessarily mean faster execution time. 



Oddities On Editing The Dungeons 

Editing the dungeons can be quite an 
interesting feat. The actual dungeon functions 
a lot like the cursor on the editing screen: it ha.s 
a wrap-around feature. You could really get 
someone lost if you had die inclination to do so. 

Another interesting feature (actually a bug 
- see definition of FEATURE in COMPUTIST 
No. 38) IS what happens when you put a two 
way ladder on level S of any dungeon. This 
allows you to go to both level 7 and level 9 (!). 
I didn't know there was a level 9. 



Level 9 ??? 

Obviously, the code dial the folks at Origin 
Systems wrote was written so that more than 

8 levels could be used, possibly as a future 
enhancement. I suggest you go down to level 

9 and then Pieer at a gem. What you see will 
he most confusing and there are no guarantees 
that you will get back once you enter. A quick 
reboot can take care of the problem. 

The enterprising adventurer might want to 
find out what sector is read in as level 9 for the 
dungeon they are editing, see if it is being used 
for anything else, and if it isn't then create a 
new level complete with gold and gremlins. 
Make your Ultima III different from everyone 
else's! 



Final Notes 

1 hope readers out there gain some enjoyment 
from these programs. It might even be possible 
to learn something from them in the form of 
subroutines or techniques. 

Budding programmers take note: comment 
your programs to death and make the flow of 
logic clear to all who examine the program. 
Tins is needed lor any prolessiona! venture such 
as submitting a program to a magazine such as 
COMPUTIST or working as a programmer in 
a company. 



Octobflr 



COMPUTIST 48 



9 



Dungeon Editor 



10REW * =============================== = * 

20 REV * U't ima 1 1 1 DungeoT Editor * 
30 REM * by Jim S HarT * 
40 REM * ================================* 

BSREy 

60 REM * * 

70REM* Iri1 al ize arrays and constants * 

aaREM * — * 

90 ■ 

10OHIMEM- 38144 

110 IF PEEK (768) + PEEK (770) <> 329 THEM 

PRINT CHRS {4 ) : "BLOAO'SECTOR ZAP, 

A$300" 
120 BUF = 38143 :RATS = 753 :KB = - 16384 ;CKB 

= - 16368 
130 INI = "1234567a909A'£RT" :ZERO = .CODE = 

ZERO 
140DIMDNS(8) HAPS(8) ,ZMIt2,9^ .TRK(B 

,9 ) ,SEC(8 ,9 ) .ChS(15 ) ,CH(15 ) 
150 : 

160 REM + * 

170 REM * Read data I nio arrays * 

160 REM * * 

190 

200GOSUB 1590 : HOME 

210 INPUT "INSERT'SCENARICOISrr 

PffESS'RETURM'" ;A$ 
220 

230 REM * * 

240 REM * Select dungeon and level * 

250 REM * * 

260 

270 GOSUB 1730 

280 : 

293 REM * * 

300 REM * Read in dungeon level selecTefl * 

310 REM + * 

320 , 

330 CODE = I ; GOSUB 2180 

340 : 

350 R£H * * 

360 REMi * Clear screen and print headers * 

370 REM * : * 

380 ; 

390 TEXT : HOME 

400 PR I *JT DNS; "(" ;LN; ")" 

410 FOR I = 1 TO 19 . PRINT "-" ; : NEXT PRINT 

■■-" : PRINT 
420 PRIST SfC{ 12). "linui" 
430PRINTSPC(3); '*1234567890123456'' 
440 PRINT PRINTTAB(4); 
450 : 

460 REM * * 

470REM* Calculate what IS in each * 
4E0REM* location and prinl It out * 

490 REM * * 

500 . 

510FORJ = 1 TO 256 : CHAR = PEEK (BUF + J ) 

520 FOR I = 1 TO 15 

530 IFCHd ) <> CHAR THEN NEXT i 

540 POKE 50 255 - ( (CHAR = 1 ) ♦ 128 ) - 

((CHAR= 128) * 192 } 
550PRiNTCHS(l ); : NORMAL : I = 15 
560 NEXT i 

570 IF (J / 16 ) = INT (J / 16 ) THEN PRINT "'" 
. PRINTTAB(4 ): 



580 NEXT J : PRINT "'" 

590 FOR I = 1T016 . VTAB 1^5 PRINT SPC{ I < 10 

) ; I NEXT 
600 POKE 32 ,22 - POKE 33 ,18 
610 ■ 

620 REM * * 

630 REM* Print opt .ons on screen * 

640 REM * * 

650 

660 HOME :VT = 7 :HT = 4 V= 1 :H= 1 

670 VTAB 2 

680 PRINT "1>HALLWAY" 

690 PRINT "2>S0LID'-WALL" 

70OPRiNT"3>CHEST" 

710 PR 'NT ■'4>D00R" 

720 PR NT ■■5>TIME'lORD" 

730 °R NT ■■S>FOUNTAIN- 

740PR NT'7>STRANGE'yi!N0" 

750 PR (NT ■'a>TRAP" 

760 PRINT "9>R00" 

77flPRINT"0>GREHLINS" 

7B0PfilNT '■ Q>WR. TINGS " 

790PSINT"W>UP'LADDER" 

800 PRINT "EiDOViTJ' LADDER" 

310 PRINT '■R>2*WAV^ADDER" 

320PRI?JT '■T>HIDDEN'DOOR" 

830 PRINT '■=>SAVE" 

840 PR I NT "ESCiQUIT" .PRINT 

850 PRINT SPCi 7 1; "I" 

860PRINTSPC(6), "J" . : INVERSE . PRINT"'" . 

: NORMAL .PRINT "K" 
870 PRINT SPC( 7 ) "M" 

880 POKE CKB .ZERO : POKE 32 .ZERO : POKE 33 40 
890 . 

900 REM * * 

910REM* Main processing loop II uses * 
920 REM* infinitely repeating FOR-NEXT * 
930 REM* 'oops. Th,s approach IS much * 
940 ^EM* faster than LSI ng GOTO' s. * 

950 REM * * 

960 : 

970 FOR ALOOP = 1 TO 2 STEP ZERO 

989 VTAB VT . HTAB HT 

990 : 

1000 REM * * 

1010 REM * Get Keypress * 

1020 REM * * 

1030 : 

1040 GET KI : POKECKB .ZERO 

1050 : 

1060 REM * * 

1070 REM * Respond to keypress * 

1080 REM * * 

1090 REM 

1100 REM * - ♦ 

1110REM* Cursor movement keys * 

1120 REM * * 

1130 : 

1140 )FK$ = "J" THENHT = HT-1 ;H = H-1 : IFH 

<: 1THENH=16 .HT = 19 :V=V-1 .VT^VT- 

1 . IF V< I THENV= 16 VT = 22 
1150 IFKi = ''K"THENHT = HT»l :H = H + 1 ; IFH 

>16THENH = 1 ;HT = 4 :V = V + 1 :Vr = VT-i 

: |FV> 16THEN V = l .VT = 7 
1160 IFKJ = "M"THeNVT = VT+ 1 :V = V + 1 : IFV 

> 16 THEN V= I VT = 7 
1170 IFK$ = "I"THENVT = VT- 1 iV^^V- 1 : IFV 

<1THEN V = 16 .VT = 22 
1180 



1190 HEM * * 

1200 REM * I f cursor key then go back * 
1210 REM * * 

1220 ■ 

1230 I F K$ = " I " OR K$ = \ '■ OR KS = "K' OR kS = "H" 

THEN NEXT ALOOP 
1240 : 

1250 REM * • 

1260 REM* Cneck for dungeon Item * 

1270 REM * * 

1280 . 

1290 FOR I = ITOLEN ;iNS ) 

1300 IS = MID$ (IN$ .■ .1 ) 

1310 IF .(oKS THEN 1360 

1320 POKE 50. 255- ((CH( I ) = 1 ) * 128 ) - ((CH(I 

) = 128 ) ♦ 192 ) 
1330 PR I NT CHS (I ) . NORMAL 
1340 POKE BUF 4 (16 * (V - 1 ) ) + H .CH(I ) 
1350 I = LEN (INJ) 
1360 NEXT I 
1370 : 

1380 REM * • 

1390 REM *save dungeon.'exi t editing screen* 

1400 REM + * 

1410 : 

1420 REM - Neec toqu. t S save dungeon level' 

1430 ■ 

1440 IF K$ <>■■ = " THEN 1490 

1450 CODE = 2 GOSUB 2180 

1460 : 

1470 REM — Need to quit w^'o saving^ 

1480 ; 

1490 IFKS< >CHRJ (27 ) THEN 1520 

1500 ALOOP = 2 

15:0 . 

1520 NEXT ALOOP 

1530 GOTO 270 

1540 : 

1553 REM * * 

1553 REM * Read Data in ♦ 

1570 REM * * 

1580 : 

1590 FOR I = 1T0 7 

1600 READ DNS (I ) .MAPS (I ) 

1610FORJ = 1TOB 

1620READTRK(I ,J ) .SEC(I J ) 

1530 NEXT J .1 

1540 FOR I = 1 T0 8 : READZMJ(1 . I) : NEXT 

1650 FOR . = 1 T0 9 : READZM$(2 ,1 ) : NEXT 

1650FOR! = 1TO15;READ'J .CH{I ) :CHS(I ) =CHRS 

(J } : NEXT 
1670 RETURN 
1680 . 

1690 REM * -* 

1700 REM * Choose Dungeon and Level * 

1710 REM * -* 

1720 : 

1730 HOME : VTAB 2 : HTAB 8 I NVERSE 

1740 PRINT "'ULTIMA'III'DUNGEON'EOITOfl'" ; 

NORMAL 
1750V-AB5 : PRINT "CHOOSE'DUNGEON'TO'EDIT' . " 
1760 ZV =8 .ZH=B :Z2=S :Zi =1 .GOSJB2O20 ;A=ZK 
1770 IFA = -1TH£NA = S 
1780 IF A = 8 THEN POP : TEXT : HOME ; PRINT 

"PfiOGRAM'TERMINATED " : END 
1790 ONJ = ZMJd .A ; HOME 
1800 VTAB 2 . HTAB 5 ; PRINT DNS 
1810 VTAB 4 ; PRINT "CHOOSE'DUNGEON'LEVEL' 

TO'EDIT':" 
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Cursor Bar Rout ine 



1820 ZV = a :ZN= 10 :Z2-9 l\--2 GOSUB 

2020 ■9 = ZX 
1830 iFB = -l TH£NB = 9 
1840 iF B = 9THENfl = 8 GOTO 1780 
1350 \M -- B :TR,K = TRK(A .3 ) .SEC = SEC(A .B ) 
1860 RETURN 
1870 : 

--* 

1^ 

Values upon entry : ♦ 

= Vert IC3 ' top of menu * 

= Horizontal left of meng * 

= s cf Items in tfiis irenu * 

= Which menu in menu array * 

Value upon exit * 

ZIS = f of menu item seiected * 

e. 4=f5urth item in menu) ♦ 

1# 



zv 

ZH 
Z2 

Zi 



K' 



1383 REM * 

1890 REM * 

1900 REM * 

1910 REM * 

1920 REM ♦ 

1930 REM ♦ 

1940 REM * 

1953 REM * 

1960 REM f 

1970 REM ♦ 

1980 REM * 

1990 REM * 

2000 REM + 

2012 

2020 Z = ZV - 1 VTAB 2V 

2030 FORZJ = 1 TO Z2 : HTA8 ZH ; PRIM ZMS(ZI 

.ZJ i NEXT 
2040 POKE CK6 .ZERO 

2050 FOR BLOOP = I TO 2 STEP ZERO : I NVERSE 
2060 VTAB ZV : KTAB ZH : PRirvT ZVIS(ZI ZV - Z ) 
2070 ,FPEEK (KB) < 128 THEN 2070 
2080 U -- PEEK (KB ) : POKE CKB ZERO NORMAL 
2090 VTAB ZV : HTAB ZH : PRINTZMS(Zl .ZV-Z ) 
2100 iF (ZK = 141 ORZK= 155 ) THEN ZK = (ZV - 
Z) * ;ZK^ 141 ; - (ZK^ '55 ) :BLO0P = 
2 NEXT RETURN 
2110 IF (ZK = 136 OR ZK -- 139 OR ZK ^ 138 OR ZK 
= 149 ) THEN ZV = ZV + (ZK = 138 OR ZK ^ 
149 ) - (ZK = 136 OR ZK = 139 ) . IF (ZV = Z 
OR ZV = Z + Z? + 1 ) THEN ZV = (Z + Z2 ) * 
(ZK -- 136 OR ZK = 139 ) + (Z + 1 ) * (ZK = 
138 OR ZK = 149 ) 
2120NE)(T 
2130 

2140 REM * * 

2;50REVl* Read/Write sector of aata * 

2160 REM * * 

2170 

2130 POKE 79S .CODE . POKE 791 .ZERO 
2190 POKE 782 .TRK . POKE 783 .SEC 
2200 CALL RWTS : POKE 72 .ZERO RETURN 
2210 : 

2220 REM ♦ ♦ 

2230 REM * Data ior each dungeon, name. * 
2240 REM* Map Coordinates .Trk-Sct I isis * 

2250 REM * * 

2250 : 

2270 DATA "DAROIN'ST IT" , "2E-07" 

22a0OATA6 .6 1 .6 2 ,6 3 .6 4 .6 .5 ,6 

,6 .6 ,7 
2290 DATA "HI NES'OF'MORlNA 
2300DATA6 9 ,6 10 6 .11 .6 ,12 ,5 .13 ,6 

,14 ,6 .15 ,7 ,0 
2310DATA"P£RIN,AN'DEFTHS 
2320 DATA 7 2,7 3,7 4,7 5,7 6,7 7 ,7 

,8 ,7 ,9 
2330 DATA " ISLAND'DUNGEON" "3A-2C' 
2340OATA7 ,11 .7 .12 ,7 ,13 ,7 14 ,7 ,15 .8 

,0 ,8 .: .8 .2 
2350DATA"TIM£'LORD" , "3A-1E" 
2360DATA8 .4 ,8 ,5 ,8 .6 ,8 ,7 .8 8 .8 ,9 ,8 

,10 .6 ,11 
2370 DATA "FIRES'OF'HELL" , "31-22" 



09- 


■IC 


,12 


,5 


■38- 


-06 


,7 


6 , 



23B0DATA8 13 ,8 14 8 15 ,9 ,0 .9 1 ,9 ,2 9 

3 .9 4 
2390 DATA "WELCOME 'FOOLS" , "13- 39" 
240BOATA9 ,6 ,9 ,7 .9 8.9 9 .9 ,10 ,9 ,11 ,9 

12 9 13 
2410 

2420 REM * * 

2430 REM * Data for menjs array * 

2440 REM * * 

2450 

2460 REM — First menu 

2470 

2480 DATA "'DARDI.N'S'PlT'" ,"'M1NES'0F' 

MORiNIA'" 
2490 DATA ""PERINIAN'OE^'THS'" , "'ISLAND' 

DUNGEON'" 
2500 DATA "'TIME' LORD'" , ■"FIRES'OF'HELL"" 
2510 DATA "NELCOME'FOOLS'" . "'EXI T'PROGRAM'" 
2520 

2530 REM -- Second menu 
2540 
2550 DATA "'l'" , ■"2'" . "'3"' , "'4'" , "'5'" , 

...g... ^ ,..y.. _ ,og.M ^ "EX I T'PROGRAM'" 

2560 . 

2570 REM — Dijngeon character data 

2580 ; 

2590DATA32.0 32 128 36 54 127 159 84 1 

,70 ,2 83 3 
2600DATAa4 4.83 5 71 6 87,6,94 16 118 

,32 ,37 ,48 ,47 ,192 



Checksums 


10 


- SBADD 


1310 


- S32E5 


20 


- S9E13 


:320 


- SC0A7 


30 


- $4D3B 


1330 


- S0719 


40 


- SAD92 


1340 


- S7366 


50 


- SC899 


1350 


- S7140 


60 


- SFf65 


1360 


- SB426 


70 


- $A3BF 


1370 


- S44A9 


80 


- IA90a 


1380 


- SO720 


90 


- $1A89 


1390 


- S9A6C 


100 


- $239F 


1400 


- S553A 


110 


- $ASA8 


1410 


- S5827 


120 


- J65CD 


1420 


- iFlF4 


130 


- JABD6 


1430 


- SC6A2 


140 


- J9C85 


1440 


- S1CC6 


150 


- J139C 


1450 


- S3AC5 


160 


- M6AE 


1460 


- SE372 


170 


- S3CDA 


1470 


- SE074 


180 


- S3093 


1480 


- SB654 


190 


- 59DE8 


1490 


- SB0C1 


200 


- JFBE2 


1500 


- S1A5E 


210 


- $2DC0 


1510 


- S5C59 


220 


- $E2D2 


1526 


- SF8DD 


230 


- IA0A8 


1530 


- $F968 


240 


- $7A31 


1540 


- S25DC 


250 


- $7FAa 


1550 


- $01CD 


260 


- $F0D5 


1560 


- $2C7C 


270 


- iB57B 


1570 


- $D9EE 


280 


- J67B7 


1580 


- $1B34 


290 


- J6618 


1590 


- i570E 


300 


- 1206! 


1600 


- J8B10 


310 


- $8DCD 


1610 


- J9170 


320 


- SA99F 


1620 


- $BC10 


330 


- $980B 


1630 


- I5F93 


340 


- I8F70 


1640 


- I31F7 


350 


- $0018 


1650 


- JE003 


360 


- $680C 


1660 


- SA582 


370 


- $04D5 


1670 


- S0424 



380 


- S6964 


1680 


- SE12F 


390 


- $7320 


1690 


- S4E9D 


400 


- $FC44 


1700 


- SB489 


410 


- $0E2C 


1710 


- $08A2 


420 


- J0S22 


1720 


- $BF5S 


430 


- (54D3 


1730 


- $7126 


440 


- $6981 


1740 


- $1536 


450 


- $0D56 


1750 


- $2F74 


460 


- $E6B3 


1760 


- $E59E 


470 


- $A707 


1770 


- $B896 


480 


- S135D 


1780 


- $FB0B 


490 


- $A99C 


1790 


- $717E 


500 


- S4CBB 


1800 


- $32E5 


510 


- S1D54 


1810 


- J47B5 


520 


- SIABZ 


1820 


- JF309 


530 


- S1FB5 


1830 


- S24F8 


540 


- S4E92 


1840 


- $4690 


550 


- S7F40 


1850 


- $0441 


560 


- $aFDE 


1860 


- iC963 


570 


- $2891 


1870 


- $A88A 


580 


- $58E4 


1880 


- $3D5E 


590 


- $FB40 


1890 


- $F95E 


600 


- S1A8F 


1900 


- $E191 


610 


- SD486 


1910 


- $BA4E 


620 


- i39B0 


1920 


- $1950 


630 


- SEEA8 


1930 


- S4F52 


640 


- SC096 


1940 


- S8D6B 


650 


- SE0B8 


1950 


- S58C2 


660 


- S4A2B 


I960 


- $9596 


670 


- $3611 


1970 


- $110E 


680 


- $9E90 


1980 


- SF161 


690 


- $B491 


1990 


- $5A66 


700 


- $8479 


2000 


- $D1ES 


710 


- $019F 


2010 


- $9F85 


720 


- $2730 


2020 


- $9DE3 


730 


- $6F40 


2030 


- $40DA 


740 


- $D4FA 


2040 


- $A55C 


750 


- $6DCF 


2050 


- $C6BE 


760 


- $5CF7 


2060 


- $507F 


770 


- S965B 


2070 


- $A8C5 


780 


- $1206 


2080 


- S07BB 


790 


- $E6£B 


2090 


- S45A7 


800 


- $22DE 


2100 


- $8F8: 


810 


- $AFE9 


2110 


- $EC36 


820 


- $B17F 


2120 


- $3BC0 


830 


- $0C17 


2130 


- $5FDA 


840 


- $O04F 


2140 


- 59000 


850 


- $0560 


2150 


- S4E62 


860 


- $94E1 


2150 


- SFCBE 


870 


- $1576 


2170 


- S71A6 


880 


- $AB4F 


2180 


- $0897 


890 


- $FE4E 


2190 


- S301D 


900 


- $230A 


2200 


- S05FS 


910 


- $B73A 


2210 


- S9eEl 


920 


- SBFB9 


2220 


- SC3D3 


930 


- i98FE 


2230 


- S'98F 


940 


- $C3D0 


2240 


- $DD32 


950 


- $E582 


2250 


- $9C£D 


960 


- $9FSB 


2260 


- $C7E1 


970 


- $FA0D 


2270 


- $9D14 


980 


- $7239 


2280 


- $3A43 


990 


- $0805 


2290 


- $BECF 


1000 


- $445C 


2300 


~ $CBC9 


1010 


- $71AB 


2310 


- 15612 


1020 


- $CABF 


2320 


- iDC7B 


1030 


- $3B8A 


2330 


- $0578 


1040 


- $ECFE 


2340 


- SB3C7 


1050 


- J3E80 


2350 


- JA0A8 


1060 


- $5841 


2360 


- $9FE4 




, continued, . 
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: he c lis urns 


continuat ion...,,. 


1070 


- J852C 


2370 


- je7C8 


1980 


- $EC78 


2380 


- J3FDE 


1090 


- 14804 


2390 


- J976B 


1100 


- $4CA3 


2400 


- J3C11 


1110 


- $AF60 


2410 


- I31:B 


1120 


- IA0FE 


2420 


- J3BC1 


1130 


- $9E24 


2430 


- JC136 


1140 


- $39D3 


2440 


- $6220 


1150 


- J9DD7 


2450 


- JEDC9 


1160 


- JA03A 


2460 


- J516D 


1170 


- J5119 


2470 


- $E5C4 


1180 


- $B548 


2480 


- $26A2 


1190 


- $E033 


2490 


- $6033 


1200 


- JS7E3 


25S0 


- 12123 


1210 


- I07A9 


2510 


- $B49A 


1220 


- $15BA 


2520 


- $1E98 


1230 


- $E3A6 


2530 


- $2433 


1240 


- $76E6 


2540 


- $4368 


1250 


- JFE0A 


2550 


- $C651 


1260 


- $DA61 


2560 


- $7£50 


1270 


- $553A 


2570 


- $52FE 


1280 


- $4360 


2580 


- $EDD3 


1290 


- $8769 


2590 


- $CF75 


I30B 


- JC265 


2500 


- $C2DA 



Ultima Encounter Editor 

10 REM * ================================* 

20 REM * ULTIMA ENCOUNTER ED TOR * 
30 REM * By : JimS. Hart * 
40 REM * ==============================* 

50 REM 

60 REM * * 

70 REM * Set constams * 

80 REM * * 

90 : 

100 HI MEM 38144 

110DIMZM$(1 .5 ) ,TRK5(4 } .SEC5{4 ) ,CH$;6 

) ,CHS(6 } 
120 IF PEEK (758) + PEEH (770) <> 329 THEN 

PRINTCHfi$ (4); "BLOAD'SECTOR. ZAP 

A$300'' 
130 INS= "123456" :ZERO = : CODE = ZERO 
140KB = - 16384 :CKB = - 16368 :BUF = 38143 

:RffTS = 768 
150 : 

160 REM if — * 

170 REM * Load data into arrays * 

180 REM =* + 

190 : 

200 GOSUB 1600 . HOME 

210 INPUT ■'INSERT'SCENARIO'DISK'S'PRESS' 

RETURN'" ;A$ 
220 . 

230 REM * » 

240 REM * Choose Dungeon level Id edit + 

250 REM * * 

260 ; 

270 GOSUe 1710 

280 : 

290 REM * * 

300 REM * Read Dungeon level in ♦ 

310 REM * * 

320 : 

330 CODE = 1 : GOSUB 1840 



340 
350 
350 
370 
380 
390 
400 
410 
420 
430 
440 
450 
460 
470 
480 
490 
500 
510 
520 
530 

540 
550 
560 
570 

580 
590 
600 
610 

620 
630 
640 
650 
660 
670 
680 
690 
700 
710 
720 
730 
740 
750 
760 
770 
780 
790 
800 
810 
820 
830 

840 

850 

860 

870 
880 
890 
900 
910 
920 
930 
940 
950 
960 
970 
980 



REM + * 

REM * Pr.iT! screen headers * 
REM * — * 

HOME : PRINT M IDS (DN$ 2 1; ■'ENCOUNTER" 
FOR I =1 TO 19 : PRINT '-" , : NEXT 
PRINT"-" PRINT 
PRINT TAet 13 ): "11" 
PRiNTTAB(4 ) . "12345678991" 
PR I NT : PR I NT TAB ( 4 ) ; 

REM * * 

REM * Print what was in dungeon * 
REM * — * 

FOR J = 1 TO 121 CHAR = PEEK (BUF + J ) 
FOR I = 1 TO 6 

IF CHS (I ) <> CHAR THEN 550 
POKE 50 ,255- ((CHAR = 70) * 192 ) : IF 
CHAR = 68 THEN FlASH 
PRINT CH$(1 ). : NORMAL I =6 
NEXT I 

IF (J / 11 ) <> INT (J / 11 ) THEN 580 
PRINT"*" : PRINT TAB( 4 ): 
NEXT J : PRINT "°" 

FOR I = 1 TO 11 : VTAB 1*6 PRINT I ; NEXT 
POKE 32 ,22 : POKE 33 ,18 



Cursor rrovefiient keys 



REM * — 

REM* Print rest of edit ing screen 
REM * — ■ 



VT = 7 
HOME : 
PRINT' 
PRINT' 
PRINT ' 
PRINT ' 
PRINT ' 



PRINT 



HT = 4 :V- 1 H= 1 

VTAB2 

'1>WATER" 

'2>LAVA" 

'3>F0RCE'FIEL0" 

■'4>M00NGATE" 

'5>SOLiO'WALL" 
PRINT "6>0ARK'SPACE" 
PRINT "^>SAVE'ENCNTR" 
PRiNT"ESC>OUirEDiT" 

PR, NT" " 

PRiNT"USE'l-J-K-M'KE¥S" 
PR. NT "TO'MOVE'CURSOR" 

PR, NT " " 

PRiNT : PRINT "'-"WATER" 
PRINT •"# "LAVA" 
PRlNT"'«"FORCE'FIELD"" 
PRINT"'" ; : FLASH PRINT' 

: PRINT ""MOONGATE" 
PRiNT ""■ ; : -NVERSE PRINT'"" ; ;. 
NORMAL : PRINT ""SOLI O'ftALL" 
PRiNTCHR$ (34 ); "'" , CHRS (34 ); 
"'DARK'SPACE" 

POKE CKB ,2ER0 ■ POKE 32 .ZERO . POKE 33 
,40 



NORMAL 



REM * ===========^==================* 

REM * Ma.n Corttrol Loop * 

REM * ========^=r====================* 

FOR ALOOP = 1 TO 2 STEP ZERO 
VTA6 VT HTAB HT 
GETKJ ; PORE CKB ,ZERO 

REM ♦ — * 

REM * Check keypress/ act accordingly * 
REM ♦ * 



990 REM 

1000 REM * 

1010 REM* 

1020 REM * * 

1030 : 

1040 IFKS = "J" THENHT = HT- 1 ;H= H-1 : IF 
H< ITHENH- 11 .HT = 14 ;V= V- 1 ;VT = 
VT- 1 IF V< 1 THEN V = 11 :VT = 17 

1050 I F KS = "K" THEN HT = HT + 1 . H = H + 1 
H>11THENH = 1 .HT = 4 V^Vi 1 VT 
t 1 : IFV> 11 THEN V= 1 ;VT = 7 

1060 IFK$ = "H"THENVT = VT + 1 :V = V + 1 
V> UTHEN V = l :VT = 7 

1070 IFK$ = "I"THENVT = VT- 1 
V< 1THENV= 11 :fl"= 17 

1080 : 

1090 REM * * 

00 REM * H cursor, go back (tor speed)' * 



IF 
= VT 

IF 



:V = V- 1 ; IF 



10 REM * * 

20 : 

30 IFK$ = "J" ORK$ = "K"ORK$ = "M" OR K$ = 

"I" THEN NEXT ALOOP 
40 : 

50 REM * * 

60 REM * Check for Hem ♦ 
70 REM * * 



90 FOR I = 1 TO LEN (KEVS ) 

00 IS = MID$ (INS ,1 ,1 ) 
1210 IF .i oKS THEN 1260 
1220 POKE 50 ,255- ((CH^^(I ) = 70 ) * 192 ) . 

IF CHS (I ) =58 THEN FLASH 
1230 PRINT CHS (I ) . NORMAL 
1240 POKE BUF + (11 * (V - 1 ) ) +H .CHS(l ) 
1250 I = LEN (KEYJ ) 
1260 NEXT I 
1270 : 

1280 REM * ♦ 

1290 REM * Save or exit? -* 

1300 REM * * 

1310 ; 

1320 REM — Quit w,'o saving? 

1330 : 

1340 IF K$ <> CHR$ (27 ; THEN 1390 

1350 ALOOP = 2 

1360 : 

1373 REM — Quit and save encounter? 

1380 : 

1390 IF K$ <> " = " THEN 1490 

1400 TEXT HOME . VTAE 5 

1410 PRINT "HRITING'ENCOUNTER'BACK'TO* 

DISK . " 
1420 CODE = 2 : (50SUB 1840 
1430 ALOOP = 2 
1440 : 

1450 REM * * 

1450 REM * Goto start Of Main Control Loop * 

1470 REM * * 

1480 

1490 NEXT ALOOP 

1500 GOTO 270 

1510 . 

1520 REM * =============================^* 

1530 REM* Subroutines * 
1540 REM * ==============================* 

1550 REM 

1550 REM * * 

1570 REM * Read Data in ♦ 

1580 REM * * 

1590 
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1630 FOR I = 1 TO 4 

1610 READ ZHJ!1 I ) ,TRK5(I ) .SECT (I ) 

1623 NEX" READZMSCi ,5 } 

1630 FOP I = 1 TO 5 

1643 HE/iDCH ,CH5{ I ) .CHS( I ) = CHRS (CH ) 

1650 NFXT RETURN 

1563 

1673 REM * - * 

1633 REM * Choose Dungeon and Leve' * 

1693 REM * * 

1783 : 

171 a HOME : VTAB 1 : PRINT : INVERSE 

17Zg PRINT '■'JLTIMA'iirENCOLWER'EDITOR'" : 

NORWAL 
1730 VTAB 5 : PRINT '-CHOOSE'ENCOUNTER'TO' 

ED T':" 
17't3ZV = e ZH = B .Z2 = 5 :ZI = 1 : GOSL'B 1930 
1753 iFZK = - 1 THENZK = 5 
1750 IF ZK = 5 THEN TEXT . HOME END 
1773 DNS = ZM$(1 ,ZK) ;TRK = TRK'.(ZK ) :S£C = 

SEC^(ZK ) 
1783 RETURN 
17M : 

1833 REM * ♦ 

1813 REM * Read/Write sector * 

1823 REM * * 

:m . 

1843 POKE 792 .CODE : POKE 791 .ZERO 
1853 POKE 782 .TRK . POKE 783 .SEC 
1663 CALL RWTS : POKE 72 ,ZERO : RETURN 
1873 

1883 REM * * 

1893 REM * Cursor bar rout me adapted froni* 
1930REM* B Kersey i Beagle Bros gang * 

1910 REM + * 

1923 : 

1S33Z = ZV-1 VTABZV 

1943 FOR ZJ = 1 T0Z2 : HTAB ZH : PRINT ZMS(ZI 

.ZJ ) . NEXT 
1950 POKE CKB .ZERO 

1960 FOR BlOOP = 1 TO 2 STEP ZERO ■ INVERSE 
1978 VTAB ZV ■ HTAB ZH : PRINT ZMS(ZI ,ZV - Z ) 
1980 iF PEEK (KB } < 128 THEN 1980 
1990 ZK = PEEK (KB ) . POKE CKB ZERO : NORMAL 
2000 VTAB ZV : HTAB ZH : PRINT ZMS(ZI , ZV - Z } 
2010 IF (ZK= U10RZK = 155 > THEN ZK = (ZV - 
Z) ♦ (ZK = 141 ) - (ZK= 155 ) :BLO0P = 
2 : NEXT : RETURN 
2023 I F (ZK = 136 OR ZK = 139 OR ZK = 138 OR ZK 
= 149 ) THEN ZV = ZV 4 (ZK = 138 OR ZK = 
149) - (ZK= 136 0RZK = 139) : IF (ZV = Z 
OR ZV = Z + 22 + 1 ) THEN ZV = (Z + Z2 ) ♦ 
(ZK = 136 0RZK= 139 ) * (Z+ 1 ) * (ZK = 
138 0RZK= 149 ) 

2039 NEXT BLOOP 

2040 : 

2050 REM * ==============================* 

2060 REM * Program data * 
2070 REM * =============^=====.==========+ 

2080 REM 

2090 REM * * 

2100 REM* Encooni Br menu name, trk-sct* * 

2110 REM * * 

2120 

2130 DATA "'ROD'OF'HARKS'" 1.15 

2140 DATA "'TME'LORD'" ,2 3 

2153 DATA '"FOUNTAfN*" .2 1 

2163 DATA ""SHRINE"' .2 .2 

2170 DATA ""EX I r PROGRAM'" 

2180 



2190 REM * — ■ * 

2200 REM * Items (character , value ) * 
2210 REM * * 

2220 : 

2230 DATA 45 
32 .72 



.35 ,64 .64 ,65 ,32 ,68 ,32 ,70 



checksums 



13 


- SBADD 


1130 


- J2647 


23 


- S9B13 


1140 


- S8BFB 


30 


- S4D3B 


:i50 


- S0F4F 


40 


- SA092 


1160 


- S9324 


50 


- SC899 


1170 


- SDC27 


60 


- SFF65 


1180 


- $1B80 


70 


' IA3BF 


1190 


- $0C00 


30 


- IA900 


1200 


- SA968 


90 


- I1A89 


1210 


- SA7A8 


100 


- I239F 


1220 


- 548 5 F 


110 


- $CC3E 


1230 


- SD0F6 


120 


- I94AD 


1240 


- SDA6C 


130 


- JDEID 


1250 


- S7136 


143 


- $2D22 


1260 


- SC77A 


150 


- W3A7 


1270 


- S42A1 


160 


- I09A7 


1280 


- S8FD4 


170 


- $596E 


1290 


- S6ED6 


180 


- $7053 


1330 


- S1484 


190 


- I3A17 


1310 


- S7E67 


200 


- $F14D 


1320 


- S1103 


210 


- $7773 


1330 


- SE293 


220 


- $4086 


1340 


- S39E6 


230 


- $I>C13 


1350 


- SE56A 


240 


- $CDCB 


1360 


- 59835 


250 


- ID53F 


1370 


- SF3D7 


260 


- $43E9 


1380 


- $B173 


270 


- $CCC2 


1390 


- SCD74 


280 


- $F258 


1400 


- S5B1C 


290 


- $9037 


1410 


- i3CFA 


300 


- $9B48 


1420 


- $5778 


310 


- $D8C8 


14-0 


- SB7BC 


320 


- $1094 


1443 


- $46 IB 


330 


- $1149 


1450 


- S55B5 


340 


- $SP59 


1460 


- $A385 


350 


- $9D43 


1470 


- $CBDA 


360 


- $BS55 


1483 


- $F8BF 


370 


- SB9F7 


1453 


- $5E6B 


380 


- S2869 


1500 


- $03CA 


390 


- SGD4B 


1513 


- $533C 


400 


- S56BS 


1520 


- $362C 


410 


- S08C2 


1530 


- $7EE3 


423 


- S6686 


1540 


- $3295 


433 


- S6B1B 


1550 


- $D414 


443 


- SBFBE 


1560 


- $394F 


453 


- S8£C6 


1570 


- $8EC9 


453 


- S2E1C 


1580 


- $90B5 


473 


- SF4B1 


1590 


- $0006 


483 


- SE52E 


153G 


- S884D 


493 


- S2E90 


1510 


- $7082 


500 


- $4EBE 


1520 


- SD868 


513 


- $C37d 


1630 


- $2112 


523 


- $EAD0 


1640 


- $8FCA 


533 


- $87AE 


1650 


- S0161 


543 


- $8901 


1660 


- S28iA 


553 


- I5EB6 


1670 


- i972C 


560 


- $6E32 


1680 


- SD924 


570 


- $96Ea 


1590 


- SA953 


580 


- $7DBA 


1730 


- SF2AA 


590 


- $C11B 


1710 


- SAA89 


600 


- $4103 


1720 


- SA384 


610 


- $B0A9 


1730 


- SF897 



620 


- $8A17 


1740 


- $42C7 


630 


- $7480 


1750 


- $CF56 


640 


- $973F 


1763 


- $439F 


650 


- $6CFB 


1770 


- $EC52 


650 


- J8564 


1780 


- S1434 


673 


- IF00A 


1790 


- $89B4 


683 


- $3BA2 


1800 


- $B30F 


693 


- S073A 


1810 


- S5C92 


733 


- S29DB 


1820 


- $F5E0 


713 


- SBBiB 


1830 


- $67A4 


720 


- $1482 


1840 


- $3836 


730 


- $C433 


1850 


- SA112 


743 


- S92B4 


1860 


- $2E14 


750 


- S5C93 


1870 


- S3B1F 


760 


- $3084 


1880 


- S64AB 


770 


- SF7C4 


1890 


- $1089 


730 


- $1052 


1930 


- S2272 


790 


- SA773 


1910 


- $CD47 


800 


- $B4B5 


1920 


- $0420 


810 


- SA675 


1930 


- $0934 


820 


- $5DD4 


1940 


- $65£9 


830 


- $234E 


1950 


- $0A44 


840 


- I7E31 


1960 


- $0763 


850 


- $73B1 


1970 


- $8860 


860 


- $8391 


1980 


- $885D 


870 


- $7343 


1990 


- S9C00 


880 


- $BA34 


2000 


- $IB4C 


890 


- $6929 


2010 


- $9B5F 


900 


- $600F 


2020 


- $949D 


910 


- $35BB 


2030 


- $3BA5 


920 


- }CA5D 


2040 


- $3E0e 


930 


- $8442 


2050 


- $7904 


940 


- $2580 


2060 


- $4A5A 


950 


- $7180 


2070 


- $9C20 


960 


- $B08F 


2080 


- $6620 


970 


- $0670 


2390 


- $A734 


980 


- S593E 


2100 


- $AAF0 


990 


- JC348 


2110 


- $3E50 


1000 


- $6521 


2120 


- $EEC7 


1010 


- $F0F4 


2130 


- JEF3F 


1020 


- $E184 


2140 


- $67CC 


1030 


- $B47B 


2150 


- JDC50 


1040 


- $7B30 


2160 


- SC3S7 


1050 


- $BE47 


2170 


- SA023 


1060 


- $F897 


2180 


- SF606 


1070 


- IBF05 


2190 


- $30AS 


1080 


- $A99C 


2200 


- $4E0O 


1090 


- $1440 


2210 


- $67A8 


1100 


- $5160 


2220 


- $A£B0 


1113 


- $2135 


2230 


- $00EA 


1123 


- $5926 








Sector 


Zap 





0300. A9 03 A3 0A 23 09 03 60 $6050 

0308 00 03 01 60 01 00 00 00 $37AO 

0310 IB 33 03 95 00 00 01 00 $08D4 

0318: 00 60 01 00 01 EF D8 00 $C3C5 

0320: 30 $4343 
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Softkey for. 




by Christopher Dean 



■ Ri'quirenientij: 

C Apple ] [ t- , i/e. or //c with 64K memory 

D 9 blank disk sides 

n 1 lempiirarv disk side 

n A secior editor 

D Two hours of spare time 



Shadowkeep is a large, highly Jettiileii 
liintasy role -playing game in which yau must 
traverse the many corridors of the giganiio 
Shadowkeep. Your objeut is to rescue the 
wizard Nacomcdon u ho has been captured by 
the evil demon Dal'hrad. 

Shadowkeep is one of the best-designed 
adventure games 1 have seen. It is written m 
an adventure gaming language known as Ultra 
J[ and use.s h:-res graphics and animation. 
Unfonunalely. its protection is also one of the 
best designed and most complex protection 
schemes. 

The Protection 

Each sector's address information is in a 
different order. The nomial order is the volume 
It. track (i. sector It, and finally the checksum. 
On Shiutowkffp. however, the track is listed 
first, followed by the sector, volume number 
(?.*;«). and tlie checksum. 

.\ddres.s Epilogues 

disk A B7 BF 

disk B , 97 BF 

disk C 9A BF 

disk D 9B BF 

save-game.'character disk... 9D BF 

The tlrst byte of the address epilogue is used 
to determine which side is in the drive. The byte 
IS read off the disk each time a sector is read 
and is indexed with a data table. A $87 yields 
a $W, S97 a $01, S9A a S0:. $9B a S03, and 
S9D a S04. These are the numbers of the sides. 

The address field is further protected. On 
even tracks, the prologue is tlic normal 05 AA 
96, but on odd tracks it is D4 A A 96, 

Shiidtiu^kffp can read the disk by performing 
a Logical Shift Right (LSR which divides the 
value in half). Thus, no matter what track is 



under (he read head, a value of SfiA will he 
returned for a SD5 or a SD4. 

The data prologue is protected in the same 
way as the address prologue but has some added 
changes. The prologue is followed by nine extra 
bytes that are not part of the data, 

The.se bytes are a false address field. The 
first three bytes are D5 (or D4) AA 96. 
followed by the track number, sector number 
and volume number (SM, e.Kcept on the save 
ganic'character disk it is %M}. Tlic data 
epilogue is BF AA. Both the address field and 
data field have invalid checksums. 

On the disk, the sectors are stored m 
sequential order in.stead of the normal sector- 
skew ing Refer to Beneath Apple DOS by 
Quality Software for more information on 
sector-skewing. 

Also, the .sector number in the fal.se address 
field is not the same as Ihe real sector number, 
but is written backwards from normal (except 
on the save game/character disk every sector 
IS a $0F). 

Tabic 1: Sector-skewing 



Fsi se 


flormai 


Shadowf.eep.'.cciress Field 











7 


I 


a 


E 


2 


1 


6 


3 


9 


D 


4 


2 


5 


5 


A 


C 


6 


3 


4 


7 


B 


B 


8 


4 


3 


9 


C 


A 


A 


b 


2 


B 


D 


9 


C 


6 


i 1 


D 


E 


8 


E 


7 


F 


F 


F 



Furthermore, each sectors volume is A5 EF 
iS.'iB). where the SA,"^ is a sync byte. 

The program cheeks for these two bytes 
because they arc written differently on a 
deprotected copy and would nut be in the 
correct location. 

Shiidcmkfep also uses a liming routine to 
check the SA5 to make .sure it is a sync byte. 

On track zero of the boot side, the track is 
only half Shadowkeep format. 

Sectors $0. and S7 through SF are m a 
normal format with variable address epilogues. 



a volume of $4B. invalid data checksums and 
a BF .A A for the data epilogue. 

On the remaining sides, sector zero on track 
zero is the onlv sector in a noniial format, with 
a volume of $4B, address epilogue of ,-\ A EB, 
data epilogue of BF A,A, and invalid data 
checksums. 

Tlie game is proiecied still further. The Read- 
Write Translate tables have been changed so 
data will be written and read differently than 
normal . 

Thus the disk is enctxled and would be 
garbage when read by a normal RVV TS. While 
this is not really a form of protection, it keeps 
the disk protected from pr>ing eyes, makes it 
impossible to edit characters or perform .sector 
edits of any kind. 

On track zero of the boot side, the normal 
sectors are encoded in two ways. 

The first way is alter the sectors are loaded 
into memory diey are decoded by Exclusively 
ORing (EORi the first byte of the .sector with 
a given value to get the byte wanted. Then, this 
result is EG Red with the ne.\t byte to get the 
value wanted and so on. 

The second way is upon disk bootup. Boot 
ROM creates a translate table at $.1.S6-$.1FF 
which IS used to convert the 342 disk bytes to 
256 data bytes. 

Boot 1 (sector zero) increases each byte of 
this table by one .starting at $J!6C and ending 
at S3D5. so that the sectors cannot be sector- 
edited without extreme difficulty . The.se sectors 
are very important because they are 
Shndnwkeep'f^ DOS and protection routines. 

Shadowkeep has yet a few more protection 
schemes. It performs a nibble -count on track 
zero upon bootup and performs a check tor a 
modified ROM. 

Also, tiie program checks to see if any 
changes were made to the program's tX)S. This 
DOS check is used by the 'initialize .save -game' 
character disk' routine and the "copy disk sides' 
routine. 

Each of the above routines displays a "This 
is an invalid system" message when the routine 
is used. 

■fo play the deprotected Shadowkeep, these 
functions could not be used even if they worked 
so that protection routine will not be removed. 



Disk Operations 



Shadowkeep ha.s no DOS. no CATAI.OCi 
track, and no RWTS to speak of It only has 
certain parts ol the RWTS that access the disk. 
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rak'semi-RWTS i^; contained in the last five 
IS^M loaded in b\ BOOTl . These are decoded 
and stored in mcmon' at SI30— S7M. As you 
can see. these routines are stored in the staek. 
input hutier, and the text screen, making the 
L'lide dil'ficult to investigate. 

Table 2 lists the major pans of Shadowkeep's 
DOS: 

Table 2 



S14D— S223 Sector read/write rourine 

i and parameter set-up 

S273— $298 Pre-nibble rouintc 

S299-S2Bf) Posi-iuhhU- routine 

S2B7— $30E Seek sruek rouiint' 

S30F— $326 Disk arm move delay table 

S327 — S337 Arm delay subrouiine 

$3A8— S41 1 Write Translate table 

$3EA— S453 Read Translate table 

$533— $5 DF Write sector with address 

field and data field 

S5F1— $5FA Write a byte subroutine 

$5FB— S663 Read data field with seclur 

data 

S6D0-S6DF Seettir Skewini- table 

S7O0-$7FF Prumir^- Data Buffer 

$806-S855 Secondary Data Buffer 



The Boot Process 

Upon bootup, the boot ROM first loads traek 
zero, sector zero into tricriiory at $8(50. The first 
few instructions of BOOTl decodes the rest of 
the sector by using the FOR command 
(mentioned earlier) and stores the decoded code 
at S80-$i6D. 

The boot then jumps to SA0 where the 
program checks for a modified ROM. 

Ne.tt, the code sets all the DCS paj;e three 
vectors and the ROM vectors. The vectors 
include the reset vector, break vector, non- 
maskable interrupt vector, and maskable 
interrupt vector. When tliiisbed. die ctxle erast^s 
tnemury from S2O0fl-$WMX) and sets the stack 
pointer at $FF so the stack does not interfere 
with the boot code. 

Now, the code loads in the eight normal 
fortmt sectors off of track lero. WTten finished, 
the .sector SISE is decoded and stored at S.A0(M. 

The boot then jumps tu S.A006 which decodes 
sector SOD at S.A IW). The retnaining sectors arc 
decoded at $130-S73(!!. At this point, the boot 
is almost finished. The .stack pointer is set t<i 
$2F and a nibble-count is perfoniied. Then the 
next three tracks arc read in. 

The next portion of die code is die protection 
against boot-tracing, 'fhe code erases memory 
from S668(!) to $BFFF, which erases moved up 
code used in a boot trace. Thus, there will be 
a sudden break in the hoot and program tlovv 
will suddenly be transferred to the reboot 
routine via the break vector. 

Finally, the boot moves the disk ami over 
track 22 and jumps to $860 which is the main 
program. 

The Deprotection Procedure 

I * I Make Shadowkeep copy itself. 



The first thing that tmist be done before the 
deprotection process can begin is to use 
Sluulowkeep to make protected copies of three 
ot its disk sides, file copies are slightly different 
than the originals. These protected copies must 
therefore be deproiecied. 

So, use Stuidowkecp and copy sides B-D. 



HID 

a character. 



Make a save-gaiiie disk by s^viiig 



For a save liame.'character disk all that is 
needed is a blank disk w'lth a volume of S04. 
However, when trying to restore saved 
characters, garbage will be printed under your 
characters. To avoid this annoyance, make a 
save game/character disk widi Shadoivkeep and 
save one of the characters onto the disk. 



Use mv SH.\DOW,COPY 



Using the cop\ program included with this 
anicle, copy the protected Sliadowkeep copies 
sides B-D and the save game.'character disk bv 
selecting choices 2 through 5 from the menu. 

W rite-protect all these sides. 



Next, copy side A by selecting 



C^Il 

choice 1 from tlie menu of the copy program. 
The program will only copy half of track zero. 
The rest must be obtained by performing a boot 
trace. 



? 1 First. Insert side A in drive one and 

move Boot ROM down in memory so it can be 
altered: 

CALL -151 
9eD0<CE»a.C6FFM 



Alter BOOT0 to break after loading 



in the first sector; then execute the boot 

96FB:4C 59 FF 
960aG 



Now move BOOT I up in memory 
so it will not be erased upon bootup and alter 
the code to break after the sector data has been 
decoded; then e.xectite the Uwi, 

sBaii<8ae.8FFiv! 

95aF:4C 59 FF 
96F8:4C 01 95 
96000 



[^U 



The decoded data of BOOT 1 is nov^ 
at S80-S16D. The code needs to be moved up 
atid altered. 

938i<8a.lEDM 
9463:4C 59 FF 
95«F:4C A0 93 



and execute the boot 

93C4;FF 
93C6:69 
9694G 



Take out the jump to reboot vector 



I — I On a ■ /c, the boot will not break and 
a "check disk drive" message will be di.splayed 



but it does not matter. If the boot did not break 
then hit reset and enter the monitor. 

flESEf ] 
CALL -151 



QOn. 



sow the code of BOOT2 is in 
memory at $900-$10FF. However, this code 
is enctxied and thus must be decoded and moved 
tip to a .safe place so a disk can be booted and 
the code saved. Type in atid e.vecute the 
following routine to decode the sectors: 



303 


A9 


69 




_DA 


»I69 


30? 


A2 


00 




lDX 


• $00 


304 


5D 


30 


09 


EOR 


S900.X 


307 


5D 00 


60 


STA 


36000.x 


30A 


CA 






DEX 




30B 


oe 


F7 




BME 


S304 


300 


A9 


CD 




LOA 


nzD 


30F 


A2 


00 




LDX 


nm 


311 


5D 


00 


0A 


EOR 


IAB0.X 


314 


9D 


00 


61 


STA 


S6100,X 


317 


E8 






INX 




318 


D0 


F7 




BNE 


S311 


31A 


A0 


06 




LOv 


SS06 


31C 


50 


00 


0B 


EOR 


IB00.X 


31F 


90 


00 


62 


STA 


6200.x 


322 


Ee 






INX 




323 


D0 


F7 




BME 


531C 


325 


EE 


IE 


03 


MC 


S31E 


328 


EE 


21 


33 


iNC 


S321 


32B 


88 






DEV 




32C 


00 


EE 




BNE 


J31C 


32E 


60 






RTS 





3MG 



\^ 



Now^ make the changes to the DO.S 
listed in table 1 , .so the copy will read and write 
normally and ignore any disk checks, 

li^norc volume and svfic bxte check 
6690:18 

Ixnoa reading fahc address fiet4 
66EE:4C 27 It6 

Ignore BF AA epilog 
6732:18 

Put !mt:k, sector, wiume. arji checksum values m 
ciirrec! iocaunti. ipuirt checkint; address epilogue 
677D:A9 09 85 FC EA EA A5 FF 
85 33 24 E9 A6 FE S5 FF 
A5 FD 85 FE A9 EB 85 FD 
Dl 07 D5 

Iftniiri' mi>hk amiu 
6116:£AEAEA 

Write and iiinore uriiin^ false address field 
6603:4C 52 05 EA EA EA £A EA 
D5AAAD 

EAEAEAEAEAEAEAEA 
EAEAEAEAEAEAEAEA 
EA EA EA EA EA EA EA 38 
A6 A0 8E SB 03 BD 8D C« 
BD 8E C0 It 03 4C DC 05 
AD 00 18 86 F7 A9 FD 9D 
8F CI ID 8C C« 48 68 EA 
A« 04 48 68 29 F2 95 88 
D0 F8 AD C7 96 20 F2 05 
A9 AA 29 Fl 95 A9 AD 20 
F105 
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Wriie ildSii fpito^ui: 
66gB:DE 

Ijinort' vti.'imf and syjw b\K check 
6*41:EAEAEA 

Recid DE .14 dam cf/fofHC 
672F:DE 

Igmre tkaxiing the seaors 
eaMiEA £A 
6M4:BD 
6HF:BD 



'*^ I Now the sectors are readv lu he 



written to tht^ copy. Boot a blank disk with ;i 
normal DOS, enter the monitor, type in (he 
following cixic, and insert the copy of Side A 
in drive one. The code sets up the RWTS lo 
write the sectors to disk So, when finished, 
execute the routine. 



CALL -151 
3t0:A9 01 8D 
A9 6> 8D 
EB B7 8D 
BD FA B7 
A9 6F 8D 
ED B7 BE 
A9 B7 AS 
49 92 CA 

3WG 



E8 B7 8D EA B7 
E9 B7 A9 M 3D 
EC B7 8D F3 B7 
A9 92 8D F4 B7 
Fl B7 A2 IE &E 
40 03 EE Fl B7 
Ea 20 B5 S7 A£ 
ti 06 D« E8 68 
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Now the sectors just written must 
be sector edited so the read and w rile; translate 
tables will be correct. Sector edit the copy of 
Side A. 



Track 


Sector 


Byte(s:i 


FrofTi 


To 


$m 


$09 


$50 


$i3 


$00 


%m 


$09 


$53 


$15 


$05 


see 


$09 


$61 


$27 


$08 


S00 


$09 


$58 


$37 


$0C 


S00 


$09 


$71 


$00 


$13 


S00 


$09 


$74 


$05 


$15 


S00 


$09 


$85 


$31 


$1B 


S00 


$09 


SAH 


$38 


E2C 


S00 


$09 


SA8 


$18 


$31 , 


S00 


$09 


SB0 


$0C 


$37 ; 


S00 


$09 


SB5 


$2C 


$38 ' 


500 


$0fl 


$78 


$B7 


$95 


i0g 


$0A 


J7D 


IBA 


$9E 


im 


$0A 


$88 


$DE 


$A7 


im 


I0A 


$84 


$F5 


$AE 


%m 


$0A 


$3B 


$96 


$87 


m 


JBA 


$80 


J9E 


$BA 


100 


$eA 


$93 


SEE 


$CB 


100 


$0A 


S9F 


$A7 


$DE 


$00 


$0A 


$A4 


$FB 


$E9 


$00 


$0A 


$A9 


$CB 


$EE 


$S0 


$0A 


$flF 


$A£ 


$F6 


$00 


S0A 


$B3 


$E9 


$FB 



IB 



The last step is to rewrite the bixit- 
sector. Sector edit track zero, sector zero and 
enter the following hex dump staning at byte 
$31: 



1:AII 00 B9 III 98 99 71 II 
CB D9 F7 4C 83 00 4C 59 
FF Ag 00 Al El 3C F2 13 
3D F3 03 49 AS ED F4 13 
A2 61 8£ 01 IS A2 FF 9A 
A9 00 85 00 A6 10 E0 18 
SI 16 BD B2 00 85 3D A6 
2B 20 5C C6 E6 00 Dl EC 
02 04 16 03 lA IC IE 01 
A2 01 BD 00 09 9D 10 AO 
E8 Dl ¥^ 20 E2 F3 2C 52 
CO 4C 09 Al 
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Write-proiect Side A. You now 
liin'C a deprotecied copy of Shtitlitwkcep. 

To plav the game, copy all tlic sides instead 
of the master dcprtitected ones (Do not writc- 
protcct these copies). 

To copy thcni, use a whole track copier like 
Locksmiih Fast Copy. You can also use Super 
lOB but you tTiust formal the disk with the 
appropriate voluine nuittber: 
Side A - Volume -SW 
Side B - Volume SOI 
Side C - Volume SW 
Side D Volurue S03 
Save game. character disk Volume S04 
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Remember, the 'copy disk" and 
'initialize save game'characler disk' timctions 
will not work. .Also, occasionally the boot side 
will not boot correctly on a warinstart 
( P51 ::-3 lRESET| ). If this happens, turn the 
computer off and then im again with the disk 
in the drive. 

About The Copy Program 

Simply put, the copy program ignores the 
address field. It reads in the data Held and u.ses 
the false address Helil to find the correct sector. 
This is done by skewing the value found with 
Shadowkfi'p's normal skewing. (Sec Skewing 
Table 1) 

Then the .'Stxtors are skewed back to normal 
and written to disk. The program uses the 
RWTS to seek tracks and write sectors. 

The program SHI OBJ is similar to SH.OBJ 
but is written difTerenlly so the save 
game /character disk can be copied. (It df>cs not 
u.sc the false address Held). 

To save the.se programs on your temporary 
blank disk, type: 

SAVE SHADOWKEEP.COPY 
BSAVE SH,OBJ,AS1400,LSUD 
BSAVE SHl.OBJ,A$1400,L$127 
BSAVE TRANSLATE TABLE,AS6096,LS6A 

MA Y SHADOWKEEP REST IS PEACE! 



SHADOWKEEP.COPY 

10 TEXT :HOME : 'NVERSE :VTAB 7 ;NTAB 12 . 

PRINT ■■SHADOytKEEPXOPY" : NORMAL :VTAB9 
:HTAB8 .PRINT ■'[l]°COPVSiDE'A" 

20VTAeil ;HTAB8 PRINT "[?] 'COPY'S IDE'S" 
:VTAB13 :HTAB8 PRINT ■'; 3] 'COPY' 
SIDE'C" :VTAB15 :HTAB8 PRINT '■[41" 
COPrSIOE'D'' 



30 VTAB ;7 .HTAB 8 PRINT "isiXOPY'SAVE' 

GAME'DISK" 
40VTAB19 HTAB 8 . PRINT "CHOOSE:"' ; . GETA$ 

:S = VAL .;A$ ■; 55 = 5-1 : i F S < 1 OR S > 5 

THE^ CALL 55338 . GOTO 40 
50 IFS = 5 THEN 150 
70 PRINT CHRJ (13 ) : PR I NT CriRS (4 ) "BLOAD' 

SH.OBJ" :SK = 5303 WR = 5350 
SO HOME : HTAB 12 :PRINT "1*0R"2*DRIVES'*". :GET 

AS A = VAL iA$ ) : I F A < 1 OR A > 2 THEN CALL 

55338 , GOTO 80 
90 DR = A :HOME :VTAB lO :HTAB 9 .PRINT 

"INSERT'DUPLICATE'IN'DRIVE"' DR :VTAB 12 

:HTAB 10 PR IN" ■'PRESS'ANY'KEY'TO* 

CONTINUE" WAIT -16384, 128 POKE -16368,0 
U0 HOME VTAB II ; FLASH :HTAB 14 :PR'NT 

"INITIALIZING" :NORMAL -PRINT CHR$ (13) 

:PRINTCHR$ (4) " INIT'HELLD.D'' DR" . VSS 
120 HOME 

130 TR= 1 BU'= = 5376 :Z = :NT = 7 : GOTO 170 
150 PRINT CHR$(13) : PR I NT CHR$ (4) "BLOAD' 

SHI OBJ".SK = 5305 WR = 5352 HOWE HTAB 

12 :PRIN' 'I'OR'2'DRIVES''", .GET A$ A = 
iFA<10RA>2THENCAL-5533S 



160 
170 



VAL [A$ i 
: GOTO 150 
30'0 90 
iP DR = 1 



THEN VTAB 11 :HTAB 2 .PRINT 
■' I '^SERrSHADOWKEEPXOPY'D i SK' I N' DR I VE'l " 
:VTAB 13 .HTA3 14 : PR I NT "PRESS'ANY'KEY" 
:WAlT -16384 ,128 POKE -15368 .0 

190 PRINT CHR$ (13 ) : PRINT CHR$ {4 ) 
"B^OAD'TRANSLATE'TABLE.Dl" . FORX = STO 
105 .Y = P£E.< (24725 + X ) POKE 47756 + X 
, y : NEXT X 

200 HOME : POI^E 47082 . DR : VTAB 10 HTAB 9 . 
PRINT " NSERT'SIDE'" CHR$ (192 + S ) 
"^ N'DRIVEM" 

210 VTAB 12 : HTAB 9 . PRINT "PRESS'ANY'KEY' 
TO'CONTINUE" : WAIT- 16334 128 POKE - 
16368 ,0 HOME : GOSUB 530 

220 REM * READ TRACK ZERO * 

230 VTAB 9 : HTAB 16 . FLASH : PRINT "READING" : 
NORMAL I F DR = 1 THEN VTAB 1 1 HTAB 1 3 
PRINT DR, : hTAB 32 PRINT DR 

240 IF DR = 2 THEN VTAB 11 : HTAB 13 : PRINT "1" 
. HTAB 32 . PRINT DR 

250 IFN = 1 THEN 380 

260 I F S = 1 THEN X = 2 , GOTO 280 

270X = 1 

280POKE2 ,0 :CALLSK : F0RL = 1 T015STEPX :Bbf 
= BUF + 256 : VTAB 13 : HTAB 13 : PRINT """ 
, HTA613 PRINTH; : HTAB 33 : PRINT""": 
: HTAB 33 PRINT l 

290 POKE 0,0; POKE 1.0: PO(\E 3 , L . POtt 4 BJF 
- INT (BUF ..'256) *256 :?0KE 5 , INT 
(BUF./256) :CALL512G:NEXTL :BUF=5375 IF 
DR =1 THEN VTAB 15 HTAB 6 :PRiNT 
" I NSERT'DU^L I GATE' : N*DR I VE'ONE" : VTAfl 1 7 
.HTAB 14 : PR I NT "PRESS'ANV* KEY" 

300 I FDR=1 THEN WAIT -15384. 128: POKE -15368 
: VTAB 15 : HTAB 1 . PRINTSPC( 38 ) : VTAB 
17 : HTAB 1 PRINT 3PC( 38 ) 

320 POKE 47082 . DR : VTAB 9 HTAB 16 . FLASH : 

PR NT "WRITING" ■ NORMA,. : FOR L = 1 TO 15 

STEP X : BUF = BUF 4 255 : VTAB 13 ■ HTAB 13 

: PRINT""" . : HTAB 13 PR I NT W, . HTAB 33 

PRINT""" , : HTAB 33 . PRINT L 

330 POKE 2 ,0 : POKE 3 ,L , POKE 4 ,BUF- INT (BUF 
/256) ♦ 256 : POKE 5 , INT (BUF / 256 ) 
: CALLWR ; NEXT L :BUF-5376 
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34gVTAB9 HTAB:5 
NORMAL 



FLASH . PR I NT "READING" 



checksums 



SHI. OBJ 



350 IF Dfl ^ 1 THE^ V'Ae 15 : HTAB 6 : PR -NT 

"INSERT'ORiGINALNS'DRIVE'ONE" : VTAB 17 

HTAB 14 : PRINT '3RESS'ANy*KE^" : WAIT 
-16384 .123 : POf^E - 16358 D 

360 IF DR = 1 THEN VTAB 15 : HTAB 1 PRiNT 
SPC(3S] VTAB 17 HTABl ;PRiNTSPC(38) 

380 N = 1 : FOR W = TR TO (TR + NT t : POKE 2 .ft : 
CALL SK 

m FDR L = TO 15 ,BUF = BUF + 256 VTAB 13 . 
hiAB 13 ■ PRiNT ■'"■• : ■ HTAB 13 : PRINT N, 
:HT^33 PRINT """;. HTAB 33 PRINT L 

403 POKE ,0 : POKE 1 ,0 ■ POKE 3 ,L POKE 4 
.BUF- INT (BUF/ 256 ) ♦ 256 . POKE 5 , 
INT [BUF/ 256) : CALL 5120 

4Ifl IF PEEK (r> = 1 THEN HOME : VTA3 12 . HTAB 
16 . FLASH . PRINT "0 :SK'ERROR" NORMAL 
: END 

420' NEXT L . NEXT W : BUF = 5376 :TR = A - 1 



430 VTAB 9 HTAB 16 
, NORMAL 



FLASH PRINT "WRITING'' 



440 POKE 47082 .OR : IF DR = 1 THEN VTAfi 15 : 
HTAB 6 1 PRINT ' I NSERT'DU PLICATE' -N 
'DRIVE'ONE' : VTAB 17 HTAB 14 . PRINT 
" PRESS' ANVKEY" : AAIT- 16334 ,123 : 
POKE - 16368 .a : VTAB 15 : HTAB 1 . PRiNT 
SPC [ 38 ) VTAB i 7 HTAB 1 : PR I NT SPG ( 
38) 

460TK = TR FORW= (TR-NT) TOTR FOR L = 
TO 15 BUF = BUF + 256 . iTTAB 13 HTAB 13 
PRINT ■""■ . . HTAB 13 PRINT W; : HTAB 
33 :PRINT""": HTAB 33 PRINT L 

470 POKE 2 .H ; POKE 3 L : POKE 4 .BUF - INT 
(BUF ..'255 ) * 256 POKE 5 INT (BUF / 
256) CALLWR ; NEXTL ■ NEXTrt :Z = Z + 1 

IFZ = 4THENNT = 1 TR = TK + 1 :BUF = 
5376 : I F DR = 1 THEN GOSUB 550 GOTO 230 

480 IFZ = 4THEN23S 

490 IF NT = 1 THEN HOME HTAB 17 .PRINT "ALL 
'DONE" .VTAB 3 .PR IN" "TO'USE'THISXOPY 
'PROGRAM'AGAI^ 'VOU'WUST" VIAE 4 PRINT 
'■ REBOOT 'THE'SKADOWKEEP'COPrD I SK'AND 
°RE-" ; VTAB 5 .PRINT "RUN'THE'COPV 
'PROGRAM " . END 

500 IFDR= 1 THENTR = TK+ 1 :BiJF = 5376 ; 
(iOSUB 550 : GOTO 230 

610TR = TK + 1 ;BUF = 5376 : GOTO !30 

530 VTAB 3 : HTAB 13 I NVERSE : PR I NT 

"SHAOC«K£E='C0PY" NORMAL :VTAB9 :HTAB 
5 [PRINT '-ORlG NAL-""""'-DUPLICATE-" 

540 VTAB 11 ■ HTAB 6 : PRINT 'DRIVE:' : ■ HTAB 
25 .PRINT "DRiVE:" : VTAB 13 : H'AB 6 : 
PRINT "TRACK;' . : HTAB 25 PRINT 
"SECTOR:" : RETURN 

553 VTAB 15 HTAB 5 .PRiNT '' iNSERT'ORIGINAL 
NN'DRiVE'ONE" VTAB 17 HTAB 14 :PRlNT 
■■PRESS'ANY'KEY" WAIT -16384 . 123 POKE 
-16368 

560 VTAB 15 HTAB 1 : i=Ri NT S=C:: 38 i VTAB 
17 : HTABl : PR -NT SPC ( 38 ) RETjRN 
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Sha6owkeep 



Trillium Corp 



J\\d Became Tb 
Ofc Sliadmikeep' ^ 



by Christ opher Dean 



What I Found Out 

The firsL thing I always do lu cheai on a role- 
play jng game is to search the Uisk for tlie name 
of my charaL-ter 1 found m> tharattcr and it 
looked like it could be edited. 



About Tablt 1 

By using the trial and error method I 
discovered the locations of the charaeter data 
listed in I'abio 1. 



Using a sector editor, yon can alter your 
characteristics, attributes, skills, and all your 
items and spells 

The byte values in Table 1 are offsets from 
the first hyte of the character name. It is done 
in this way because the character can start 
anywhere in the sector (sometimes causing part 
of the character to tw in another sector) but will 
Stan at a Sv0 or a S.vK address, where j" is a value 
from $09 to $0F 

.■\lso. any byte not listed are locations that 
[ could not discover the use for. For example. 



■ Kcquirements: 

U A sector editor 

n Cracked copy of Shadoukeep (see 

prcviaui iirtiiU': 

Softkc> for... Shadowkeep.) 



Shadowkeep. like many paniasv ROle- 
playinQ qames, is A qame in which ii is 
vepy hApCi to Become powenful Anf) suy 
alive. Iheue aue 6ozens of fteaOly 
CReatuRes wAndecmq thROUQhout the 
keep that will kill you in the wink of an 
eye. 

Because i 6eco6e6 the disk when i 
csacke^) Shadowkeep (By cORueciinq the 
Reaft/WRiie tRanslate UBles), 1 beaOeb 
to see if 1 coulfi alteR mv chaRacteRS. 













— 1 






Table I 




Table U 






Byte offset 


Descriptiim/ValitJ values 


Value 


De.vcription 






STO-$0B 


Name 


S12 


Rune mage 






$0F 


Class (Tabic 11) 


SIB 


Necromancer 






$10 


Strength (SOfl-SFF) 


$m 


Warrior 






$11 


Inielligcnee (S00-SFF) 


$14 


Shadow mage 






$12 


Dexterity ;$00-SFF) 


$09 


■Monk 






$1.1 


[,eadership (SW-SFFt 










S14 


Power-Base f$O0-$FFi 










S15 


Power-Now I$(«-$FF| 










S16 


Hit Pmnts-Basc (S0e-SFF) 




Table III 






$17 


Hit Points-Now ($O0-SFF)) 










SIK 


Sex/Condition (Table III) 


Value 


Descriptiun 






S19 


Attack Percentage (SM-SFF) 











$1A 


Parrv Percentage (S00-SFF) 


$00 


Male 






$1B 


Mayic Percentage (S00-SFF) 


SOI 


Dead male 






$ir 


Search Percentage (S0O-SFF) 


$02 


Female 






$1E 


Open Percentage (SW-$FF) 


$03 


Dead female 






$M 


Goldens-low byte (S0O-$FF) 


$04 


Poisoned male 






S33 


Goldens-high byte (S00-SFF) 


$05 


Poisoned female 






$35-$39 


Active Items (Table IV) 


$08 


Zombie 






S3B-S52 


Items- Spells (Table IV)) 










$^3-S57 


Items.Spells if no active items 
(Table IV) 
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byle offset $1D seenis to be a duplicate of the 
Search Percentage value, but [ could not figure 

out if ii wys or why il waSs needed. 

Bytif otYset S3 3 needs some explanation, 'f he 
maximum [lumber of Golderis that can be 
obtained is 32.767. [f you put a SS0 in this 
location, you will have -32513 Goldens. Values 
from SKH-SFF caut.e the number of Goldeiis to 
be negative, value;, from S(iW-i7F c3u\e the 
value to be positive. 

Edit Your Character 

First, using a sector editor with disk -search 
capability, search the boot side or save 
gamc'charaeter disk of Shadowkcep for the 
name ol your character. (1 suggest dial after you 
create your character, you should transfer it 
trom the copy of your boot side to the copy ol' 
your save game'charaeter disk and sector-edit 
this disk.) 

Once found, use the tables I provided to edit 
your character. The valid value for each 
location is listed to the right of the description 
in parenthesis. 

When done editing, write die sector back to 
the disk. 

About Table II & III 

Table II is a listing of your possible class 
values. Placing an invalid value will ruin the 
display when viewing your character. 

Table 111 lists your .sex and/or condition. 
There are three possible conditions I found, 
dead, poisoned, or «>nibie. 

Finally, Tabic IV lists ever)' item, weap^m, 
armor, scroll, and spell available in the game. 
Byte values in parenthesis are the values for the 
magical version of that item. 

Now you are ready to conquer Shadowkeep'. 



i 



Table I\ 

Value 

%m {%m 

S01 ($81) 
%m ($H2p 
$03 ($83) 
$04 ($84) 
Se.'i ($85) 
SOfi ($86) 
$t)7 (%^1\ 
S08 ($88) 
$tW ($84) 
$0A (S8A) 
$0B ($HB) 
$0C ($8C) 
SOD ($8U) 
$0E ($8E) 
$0F ($8F) 
$1H ($90) 

$11 (Syi) 

S[2 (S92) 
$13 ($93) 
$14 (S94) 
$15 (S95) 
$l() ($%) 
$17 (597) 
$18 (S98) 
S19 (S99| 
$1A (S4A) 
$IB (.S9B) 
SIC ($90 
SID (S9D) 
.$1E ($9E) 
SIF (S9F) 
,S2« tSA«) 
S21 {$A1) 
$22 ($A:) 
$23 ($A3) 
$24 ($A4) 
$25 (5A5) 

526 (SA6) 

527 ($A7) 
$28 (SA8) 
$29 ($,^9) 
$2A ($AAi 
$2B 1$AB) 
52C (SAC) 
S2D ($AD) 
S2E ($AE) 
$2F ($AFi 
$30 ($B0) 
$31 (SBh 
$32 (SB2) 
$33 (SB3) 
W4 lSB4i 
$35 i$B5) 
$36 ($B6) 
$37 ($B7) 
$38 ($B8) 
S39 (SB9) 
S3A (SB.A) 
$3B ($BB) 
S3C {$BC) 
$3D (SBD) 
$3E ($aE) 
$3F (SBF) 



Dcscriptiira 



No objecr 
Goldens 
Key 

Hammer 
Torch 
Mace 
Axe 

Broad $word 
Bastard Sword 
Great Sword 
Tiny Sword 
Souleater Sword 
Kinslaver Sword 
Valkam sword 
Breaker Bar 
Medium Shield 
Great Shield 
Quarter Staff 
Eldritch Staff 
Koganh's .Staff 
Staff of Power 
Staff of Quiet 
Gloves of Cold 
Salve of Aid 
Shadow Cloak 
Ragged Cloak 
Culdron\ Wand 
Wand of Travel 
Rod of Pow-cr 
Silver Helm 
Gem of fJarkness 
Black Crystal 
Gem of Change 
Devil's Gem 
Funny Rock 
Sun Amulet 
Amulet of F.vil 
Charlice of ,Awc 
Smedl) 's Stick 
Soggy Stick 
Plate' Mail 
Leather Armor 
Studded Mail 
Chain Mail 
Sdver .Armor 
Scale Mail 
Runic ,-\rnior 
B<iok of Darkness 
Book i'ii' Opening 
Book of Notes 
Silver Rose 
Lock Pick 
Ornate Ring 
Ring of Life 
Black Ring 
Flame Scroll 
Thrust Scroll 
Fireball Scroll 
Sunburst Scroll 
Frec/e Scroll 
Stalis Scroll 
Protect Scroll 
Guard Scroll 
Barrier Scn>ll 



Value 

540 (SCHf 

541 (SCli 
$42 (SC2) 
$43 (SC3) 
$44 (SC4) 
$45 (SC5i 
$46 (SC6) 

547 (5C7) 

548 iSC8) 

549 ($C9) 
S4A ($CA) 
S4B ($CB) 
S4C ($CC) 
S4D [$CD) 
S4F (SCE) 
$4F (SCF) 
$50 (SD0) 
$51 ($D1) 
$52 ($D2) 
$53 ($D3j 
$54 (SD4) 
%55 ($D5) 
$56 f$D6) 
$57 ($D7) 
$58 {$D8) 
.$59 ($D9) 
S5A (SDA) 
$5B (SDB) 
%5C (SDC) 
$5D (SDD) 
S5E (SDE) 
S5F ($DF) 
$6t!) I$H0| 
$61 ($E1] 
$62 l$E2) 
$63 l$E3i 
$M {SE4) 
$65 (SE5) 
S6f) (SH6) 
$67 |SE7) 
$68 (SF.8) 
$69 ($E9| 
,$6 A ($EA! 
S6B (SEB) 
S6C ($EC) 
S6D ($ED) 
S6E (SEE) 
$6F ($EF) 

570 ($F0) 

571 (5F1) 

572 ($F2) 

573 (Sl-3) 
$74 iSF4) 
$75 ($F5) 
$76 {$F6) 
S77 ($E7) 
$78 ($F8) 
S79 (5F9) 
$7 A I SEA) 
57B-S7F 



Description 



Sanctuary Scroll 
Ward Scroll 
Fortress Scroll 
Hea! Scroll 
Haste Scroll 
Luminance Scroll 
Reveal Scroll 
Revive Scroll 
Zombie .Scroll 
Decav Scroll 
Cure Scroll 
Death Scroll 
Maim Scroll 
Dissolve Scroll 
Fear Scroll 
Slay Scroll 
Percieve Scroll 
Cantrip Scroll 
Fire Scroll 
Moon 11 re Scroll 
Illusion Scroll 
Shift Scroll 
Twiliiiht Scroll 
Dark fire Scroll 
Siarllare Scroll 
Flame Spell 
Thrust Spell 
Fireball Spell 
Sunburst Spell 
Freeze Spell 
Status Spell 
I'rotect Spell 
Guard Spell 
Barrier Spell 
Sanctuary Spell 
Ward Spell 
Fortress Spell 
Heal Spell 
Hasie SiK'll 
Luminance Spell 
Reveal Spell 
Revive Spell 
Zombie Spell 
Decaj Spell 
Cure Spell 
Death Spell 
.Maim Spell 
Dissolve Spell 
Fear Spell 
Slay Spell 
Perceive Spell 
Cantrip Spell 
Fire Spell 
Moonfire Spell 
Illusion Spell 
Shift Spell 
Twilight Spell 
Darkfirc Spelt 
Starllare Spell 
Nothing 



October 



COMPUTIST 48 



19 




when 
writincf 



hM h tb erftbt 



• Remetr.hcr thai jour IctKrs or pans ut'thein ma;, 
be used in ihi; new Ri;aJi.T> Dau E\L'hanj;e c\ en if 
vou don'l aJJros il u> [lw RDEX editor. 
Coirespsradenvi; iha[ gtis puhlished nuy be ediied 
for clariij , ijramiiier and spate requirements 

• licL'ausf id iHl" ^rc;il njmbtT nf ietiLTv *c rceeive 
and ihe ephemeral anj unpredictable appearand i)f 
(W all-vnluntccr stall, any response in your s^ utiles 
will appear only in the RDEX, su it would be more 
appropriate for you to present teciinieal questions 
to the readers and ask for iheii response^ which w ill 
then he placed m the KDL\ section. 

• Address your letters to: 

rOMPl'TIST 

RDEX Ediior 

P() Box !1II846-K 

Taeorria. WA 98411 

• Although CtlMPUTIST ear no longer [turthase 
short softke\s and artteles, please continue to 
eoniribuie them but place them m a letter to the 
editor so dial [he\ gel published in the RDEX as 
sixm a.v possible. 

-RDEXai 




The ISPLT column has been made a part of 
the RDEX f Readers Data Exchange) fomm. 

Opiniom expressed are not necessarily those 
of COMPUTIST , its volunteer ediiorinl staff or 
SofiKey Publishinf;. RDEX is a publishi'd forum 
for all readers where the open exchange of 
computer information (opinions, softkeys, copy 
panm iinJ i^eneral diMCoveries) can occur. Such 
informalion cannot be verified by ihc 
COMPVTIST editorial sttiff. If errors are 
delected, plctise send corrections and updates 
to RDEXed. 



Alexis Gehrt 



Deprotecting some 
Apple IIGS programs 

Mo.st of these programs will also run on u 
SCSI Hard Disk! 

lies Softkey for... 



Music Studio iProuos i6 un 



Ac'tivisuui 



Deprotection: 

E ock Bj'te From 





flGS Softkeyfor... 






Paintworks Pius I'rooos /6 1.01 

.Act 1 vis ion 




Deprotcttion: 

Block Byte =roir- 


*3 


S25: E1E3 00 01 
S29: SICF 00 \2 


E.AEA 
£A£A 


Hiiril Disk Patch: nr the proa 
'^■■mi the muster disk. With this i, 
he copy us itkl 

3lot;k B/te Frtjm 


ram will always 
han^o it aeeepls 

To. 


S291 S1D3 22 


AF 



To 



S44D 


S16 


82 


32 


SD 


Hard Disk Patch: 

Block B/1e From 


S4-;d 


S30 




22 





EA EA EA 



AF 



$AF is used to fool OMF-Relocative Loader 



//C;.S Softkeyfor.. 



Siiangiiai 



(ProDOS 16 1. 1) 



Activisitm 



Deproteciion and Hard Disk Patch; 

Block Byleis.i ^ro.ii To 

i27D il62 



13 FB C2 30 A9 01 00 6B 



IIGS Softkeyfor.. 



Haderll 



(proDOS 10 1.01 



Act i vision 



Deprotection and Hard Disk Patch: 

Block Byte From To 



S3D8 


S3C 


22 


AF 


S3D8 


m 


D0 06 


EAEA 


$456 


S3C 


22 


AF 


5456 


S43 


D0 06 


EAEA 



nOS Soflkey for. 



Mean iS (Hgs Goif) 

Acctdadc 



Deprotection tGolf.syslh): 
Block Byte Fron To 

S536 S174 SD 



AD 



Deprotection (Architect!: 
Block Byte From To 



S29C S174 



80 



AG 



A Hard Disk patch is iiiii possihlc because 
[he programmers were so silly to use direct 
pre rives and not nnxli liable ProDOS 16 
prctlves, which have preceding length byie! 



HGS Softkeyfor... 



Instant Music 

Electronic Ans 



Deprotection: 

Block Bvte From 



To 



Sli: SdE 
Sli: S53 



22 
F0 02 



AF 
EAEA 



This program works on Hard Disk without 
the "Key Disk Question". 
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Deluxe Paint 

FJcctronie Ans 


Deprotection: 

BIOCK Byte Fron Tc 


%m SI65 n 
S412 S16A F0 02 


AF 
EAEA 



This program also works on Hard Disk 
wjthoui the "Key Disk Question". 

IIGS Softkey for... 



Top Draw 

SivlL'ware 



De protect ion: 
Block Byle From 
$394 S1E2 



To 



D0 ID 



80 lA 



This program works on Hard Disk without 

any modify ins:, which is vcrv positivel 

lies Softkey for... 



m Paint 

Baudviilc 



I'aiiil .121) .Super Dcprotcction: 
Block Byte Frar To 



S273 SllD 



3a 



8S 



Pain! 640 Super Deproteciion: 

Biock Byte Fron To 



S2DB 5DF 



30 



30 



"I'd IS prognim also works on Hard Disk 
without any modifSing. 



UOS Softkey for.. 



Music Construction Set GS 



Electronic Arts 



change 



Requirements: 



U Copy 1/ Phii or simular program lo copv 

disks 
D ProDOS sector editor (I prefer ZAP on 

Bof; Of Trich U) 

I Second 3.5 drive (or SO0K RAMDISK) 



Ll 1 First open [he (ilc to edit; 

OPEN'MUSICGS/JIMSCODE 

L^ I Read Block 0, 

L? 1 Change byte.s $1CF and $1 D0 from 

49 20 to EA EA. 

IIGS Softkey for. . . 



S/iangfiaJ 

A division 



] 



First open the file to edit: 



OPEN i'SHANGHAIi'SYSTEM;ST ART 

L? J Read Block $0, 

l_? I Change byte SDF from 01 to 00. 

This ehanfic to Shan^'ai also makes it run 



t aster 1 



Marshal P Brown 



Softkey for. . 



The Print Sfiop ,cohr vcrshm 

Broderbund 



The new color version of Vie Flint Shop is 
still using the nibble eouni routine listed in the 
COMPl'TLST 17. The track $22 nibble count 
rountine has been relocated to address S083A, 
The cure: 

I '* I Cop) '11 w Print Shop with any 

copier that W'ill ignore error.s on track S22. 

Search the di.sk lor: 20 M 08 (JSR 



S08JA) 



? I Replace the JSR with: EA EA EA 

On my version 1 found this call on track $3, 
sector SE. bytes SI 2. .SI 3, S14 



Track Sector Byteis 




Samer M Kurdi Amman 



Softkey far. . 



Mouse Word 

Version Soft 



I was pleased t<i sec the sotikey for Mouse 
Ciilc in COMPUTIST 45. I have another 
Version Salt program, Mou^c Word, which is 
also protected. 

1 made a copy of Wdu.st Word with COP^'A 
and searched lor the bytes: A2 00 E8 D0 07 
C6 06. They were found on track OF. sector 
0E. 1 changed the S07 to a S4K as in [he Mouse 
Catc softkey and, lovv and behold, it worked 1 



.Softkey for. . , 



Spindim 

.■\ctivision 



I hanks to a letter from John Nicholson in 
COMPUTIST 46. I was able to deprotect 

Spindizzy. a greai 3-D game by Activision. 
Since Activision uses the same copy protection 
on several i.->f Iheir programs, 1 used Mr, 
Nicholson's softkey on Spindizzy. 



Copy SpinJizz.\ with COPYA, 

Use vour sector editor and make die 



following changes 



Track Sector Byte(si 


Frorr 


'o 


SIC 13 S58-J97 
S9S 
S3S 


t 

25 
PC 


at! EA's 
A9 
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David G. Alexander 



Antique Soft key for.. 




The disk uses modified E>OS 3.2. Each side 
has iwo caialojis. The hack siJe ha^ normal 
marks. The from side has marks that change 
for each Iraek and seLlor. 

The back side has a VTOC on track SI 1. 
stcLor and a catalog un hectors 52 and SI 
which includes the graphic screens u.scd hy tht; 
demii prtigram in Hit: "Player Disk". These 
files can be transferred w a fJOS 3.? disk usitij; 
Muffin nr a versitin <if Copv II P/h.v thai enables 
designaliim of a disk as DOS 3.2 or DOS 3.3. 

To transfer the other tiles, use a sector editor 
to read track SI 4. sector Sfl and write it to track 
S 1 1 , sector .St'i and use Muffin again. The disk 
copv program in the Applesoft "Player Disk" 
file will not work with DOS 3.3 and can be 
replaced with a suitable message 

[he DOS 3.2 RWTS on the front side is 
modilied to read the altered marks. In normal 
DOS 3,2 the address header is read using EOR 
#$D5, CMP #SAA and CMP #.SH5. 

In Ultima I boot side the header is read using 
[AND S48, CMP n^^ J, CMP #SAA and 
I AND tt?>\i. CMP mi 1. I don't know what 
IS stored at $4H. but assume that it is some 
function of the track number. 

Similarlv, the data header is read using 
[ AND S48. CMP ;t'S55 1. CMP tSW and 
[AND #S2F-, EOR miy \. The logical 
operations on the first bytes of the headers 
somehow make them all come nut tn S55. 

The logical operations on the third bytes of 
the headers somchov^ make them all come out 
to 'Kxo. Since the operations on the third bytes 
use fixed numbers, no modification to the 
RWTS is necessary. 

However, the operations on the first bytes 
use changing values w hich are stored in location 
$48. 

Tn normalize the Iront side. I used C<>;i\ II 
Plui nibble editor to determine and record the 
first bytes of the address and data headers on 
each track. 

The headers were the same throughout a 
particular track whereas the trailers changed 
from sector to sector, 

The next step was to htxit the front side, enter 
the monitor and mixiify the RWTS so that the 
recorded values could be poked into the RWTS 
and u.sed with straight CMP statements. 

The modifications were .SB965;C') IX'i EA 
EA for the address header (the D5 could be EA 



or anything el.sc because it is replaced b\ a 
POKEd value). 

The modifications for the data header were 
SB907:C9 D5 EA EA. 

.Atlcr making the modifications the RWTS 
was iiio^ ed dow ll to SI 900 and basaved for use 
in the swap controller. 

The final norma I ligation step was to modify 
the DOS 13 controller to include a table of data 
values corresponding to the recorded first bytes 
of the address and data headers for each track 
and poke .statements to read the values Irom the 
data table and poke the ill into SB966 (address) 
and SH9tW (data) for each track. 

The front side also has two catalogs in the 
same places as on the back side. The one on 
track Sll is a dummy. 

After normalizing the disk, the files can be 
transferred by writing track $14, sector $0 to 
track Sll, sector %Vi and using FID or Copy I! 
Plus 



Controller Checksums 



Controller 



1003 REM ULTIMA i CONTROLLER 

1001 CD = m 

1002 POKE 775 .96 . REM IGNORE UNREADABLE 
SECTORS 

1017 POKE 909 .12 

1S!8 003^13 

1029 TK = 

1021 .T = 3b 

1031 ST = T1=TK GOSUB 490 : '^EM READ 

1332 GOSJB 360 READA1,A2 PORE 47462 Al 

: POKE 47363 ,A2 
1060 GOSUB 430 GOSUB 109 : ST = ST + 1 ; I F ST 

< DOS THEN 1060 

1393 GOSUB 490 . GOSUB 360 :TK^ Tl :ST = : 

REM WRITE 
1103 GOSUB 430 . GOSUB 109 :ST = S" ■» 1 : IF ST 

< DOS THEN 1109 

1120 IFTK< (LT- 1 ) THENTK = TK- 1 GOTO 

1031 
1143 HOME : PRINT : PRINT ■■■CO^Y'DONE- END 
5003 DATA '213 .213 ,223 223 221.215 221 

,223 ,223 223 
5010 DATA '221 .221 .223 221.223,221 223 

,223 ,223 .221 
5020DATA'223 .223 .223 221 223.223 223 

.221 ,223 .215 
5033 DATA '223 .223 .221 223 223.215 223 

,223 ,221 .223 
5040 DATA '221 ,223 ,223 215 221.215 22L 

,215 ,223 .223 
5050 DATA '223 .215 ,223 215.223 .221 223 

,223 .223 ,215 
5060 DATA '221 .223 .223 215 .223 .223 221 

.223 ,223 223 
10013 PPI NT CHRJ i4 I . "BLOAO'RrtTS ULTIMA^ I, 

AS19O0" 



1000 


- $356B 


1001 


- SD329 


1002 


- $1A55 


1017 


- S669A 


1018 


- I6F23 


1020 


- $27AB 


1021 


- JD04§ 


1031 


- S58A2 


1032 


- SAe3D 


1060 


- SAF39 


1090 


- SA32E 



11B0 


- S922E 


1120 


- S9FC8 


1140 


- SA5B2 


5000 


- S9D5F 


5010 


- SBF5 


5020 


- SC201 


5030 


- S260D 


50':0 


- S1053 


5350 


- SSEC4 


5S60 


- S1F2E 


10010 


- SBDll 



.Antique Sriftkey far. . . 



Chess 7J 

Odesta 



The Protection 



The protection comprises changing the first 
bvtc of the address headers from SD5 to $D4 
for alternating sectors on each track. .Also, the 
trailers are changed from $DE SAA to SEE 
SAA. 

The disk is converted to standard DOS using 
super lOB with POKE 47444.74: POKE 47445. 
2131: POKE 47446. 106; POKE 47447. 208: 
POK1-; 4744H. 239 to accept SD5 or SD4 and 
POKE 47426, 24 to ignore the altered trailers 
I universal Penguin eontrolleri. 

The copy disk must Ix" lormatted with a 
volume number of S0fl. 

The protection further comprises a Dav Holle 
loader similar to the one for Ma^qiuradc 
(COMPUTLST 3.^. p. 24) which consists ol the 
Ibllowing sections: 
*$HQ@—$H2A boot code loader which jumps 

to S86B 
'$H2B $H2C variables 
*$H2D $H6A reset routine (encrypted) 
*$t'i6B—$HF5 various setup including reset 

vector pointing to $1 10. 
*$8F6~S9.K^ de-encryption routine. Decodes 
and stores the reset routine from 
($B2D-SS6A to$l 10-$14D) and the ttisk 
access and setup routines Irom 
{S93D~SBDF to $53D to S7DF). Jumps to 
S788. 
*$93D—&$B6D disk-access routines 

(encrypted) 
'SB6E—SB87 "Copyright Dav Holie" 

(encrypted.) 
*SBS8—$BDF various setup including filling 
memorv bl(x.-ks with SOZ's. Jumps to SFC58 
(monitor home routine). Returns to $B4HF 
via stack pushes at |$B.AA— $BADi. 
(encrypted) 
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The data is encrypted by Exclusive ORiiij; 
(EOR) blacki of code with respective bytes in 

(iihcr hlock.-i of code. 

The ncM itcp is lo modify I hi; loader to rcDd 
standard IX)S iraik-rs. Use SRbAU'SWKI IT': 
or tin; likL' to read the following sectors from 
trai-'k St) inlo iiKnrurv. 



Sector 


Memory 


SB 
$E 
SD 
SC 


5800 
S900 
SAWl 
S8O0 


1 



The Deprotection 

M(xJif> the dc-cncrypiation routines to 
decode ihe respective blocks and save them in 
the same mcmorj' locations rather than 
rekjcating them and then stop execution. 

91>:9D 2D Sfi r.'u'i mum 

91E:9D as 19 liM: access mid seiup wulkes 

92D:6) if,..,'i f 111 iidi'R 

8F6G f.iiti/if Je-eiicrypSatinnj 

Modify the program to load and relocate the 
decoded routines railicr tliati decoding iheiii 
again . 

MD:BD 2D iS reset mmm 

91i:9D 10 11 rftrt routine 

91B:BD III 89 diik acceis aruJ setup rtmimts 

91E:9D M 15 stisk uriVJi and setup mutiiies 

92D:A5 vvnimui' aecuiion 

Modify the decoded disk access routines to 
read standard DOS trailers. 

984: DE 
9EB:DE 

The disk access routines comprise a disk 
check at iSB3A SB4F) which compares the 
current sector number with the current address 
header lSD5 or SD4). Disable the routine. 

B4C:I9 

Write the memory pages back to the disk 
using SREAD SWRITE or the like. 

The final step is to disable a second disk 
check routine that counts the number of self- 
sync SEE bvLcs preceding each addre.ss header. 

The original disk is modified lo comprise 
exactly three of said bytes. 

The routine is loaded at (.SHCI4— $BC2A) 
and encn'pted on the disk at track S22. sector 
$.1 by f-XJRing the memory page tUCtW with 
page S620O which is stored on ihe disk at track 
$17, sector $11 in uncncrypred form. It appears 
that the routine is normally encr>-pted in 
memory and dc-encrs'ptcd as required as 
another form of proleetion. 

The routine loads the X-rcgistcr with SEC 
and incremenls the register each time an SEE 
is read from the disk. If l;hrcc SEE bvtes arc 



read ihe register will be incremented to S0(1 
which is stored in S4E. 

The disk cheek is di.sabled by the tollov^'ing 
nKxJifications to the unencrypted routine. 

SBC IM— change from SEC to SW) (load Ihe 
X register widi $00 rather I ban SEC). 

SBCI A— change from $E« to SEA (disable 
incrementation of X register!. 

However, since the r<iutine is encrypted on 
the disk. It is necessary to encrypt the altered 
bytes. The values to EOR the new bytes with 
are the corresptnidmg values in page S62tKl. 

The following sector edits will disable the 
encrypted routine track S22, sector $3 on the 
disk. Byte SI 8: change from $B6 to S4A (EOR 
the desired byte SW) with $4 A from $62 IH in 
memor>) Byte SI A: change from SA2 to SAB 
(EOR the desired byte SEA with S4A from 
S621A in memory 

How about a nice deprotceted game of Chess 
7.07 



Still another Softkcy for . , 



Mltrator 

Mind scape 



The Protection 

Track S0. sectors St) to SSI on both sides of 
the disk can be read b) iiomial DOS. However, 
the remaining data is scrambled on the disk 
using drastically altered translate tables (read 
- $BA% to SHAEF, write - SBA29 to SBAfi8i. 
The data checksums are also altered. There is 
a disk check routine nn track $22, sector SE 
which IS scrambled on the ilisk ami loaded into 
page S2 of meniorv-. 

The Deprotection 

To deprotcct the di^k, boot the original, break 
into the monitor, move the RWTS to $1900 
[l':)W0<BH«1.BFFFM) and save it to the 
Super lOB disk 

BSAVE RWTS. XXX. AE19B9. LS8M 

Then, copy both side^ of the disk using the 
swap controller with SB942 changed to $18 to 
ignore Ihe checksum errors. The main data on 
the copy will be unscrambled. 

Next, use a sector editor or ^^hatever to copy 
track S0, sectors $0 to S9 from die original sides 
to the copy sides (sector S4 can be skipped). 
Then, copy track S0, sector S4 from a standard 
I>O.S disk 10 both sides ot the copy so that Ihc 
altered DOS on the copy will read data using 
the standard translate lables. 

The final step is to disable the disk check 
routine. Edit track S22, .sector SEi, start byte 
S75 from $BD m CO $4C 71 02 on both sides 
of the copy so that when the disk check tails 



the program will jump to the same instruction 
as when the disk check pas.ses. 



Softkey for. 



Mabels Mansion 

Daiamosl 



Thanks lo haac de Pig lor his crack of 
yVfyt/iiJi- /; in COMPUTIST 40, Miihel's 
Mansiim uses a similar disk check routine and 
encryption scheme. 

The Protection 

The disk check routine is located at $A3B8 

to $A42B and Jumps lo a reboot routine al 
$A448 if the check is unsuccessful, 

Botli routines are included in 41 (S29) pages 
of data which are cneryptcd on the disk, loaded 
at S7EO0 lo S.^6FF and decoded by exclusi^e- 
ORing each byte with the preceding byte. 

The de-encryplation or decoding loop is 
loaded at S7D22 to S7D4 1 and located at track 
$18. sector SE on the disk. 

In addition, there arc several jumps to the 
rebixit routine from olher pans of die program. 

The Deprotection 

The crack is as follows. 

1—5 1 U.se COPY.A or whatever to make 

two copies of the original disk. Label one 
"Mabel's Mansion Cracked" and the other 
"Mabel's Mansion Working". The names on 
the labels are critical (just kidding). 

I_? I Sector edit the "...Working" disk 

by changing track $18, sector SF. start bvte S42 
from 4C 02 7E lo 4C 59 EE. This will allow 
the b(K)t process to prtxreed through exectition 
of the decoding loop and then jump inlu the 
monitor. 

L^ J Boot the "...Working" disk and 

press the RETURN key as required until the 
program jumps inlu the monilor. The drive can 
be stopped by typing $C0b8. 

Now the fun starts 

In order lo open the program to CPT's (cheal 
playing techniques) and the like it is desirable 
to .save the de-encrypted code lo disk. 

This requires saving 41 (S29) pages of 
niem<iry between S7E()(1 and S.'\6EE to the 
proper sectors on the di.sk. 

I used SREAD.SWRlfH from COMPUTIST 
42 and v^■role each sector manually , which look 
about 10 minutes. Inspector (which I don't 
have) would probably work loo. 
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Persons who (.onsider RML (rcpetiiiVL- 
manual labor) unacvcptably FL-punjiLTii should 
be able to automate the proeirdurL- by writing. 
debugging, and v'erifyini; the results of a 
machine language program to pcrfonii the same 
function in a shorlfr period of time. 

Sinec the block from SMMW to iAfthl- is 
overwritten by booting DOS. I perfomied the 
procedure in two stages. 



]b. 



lot a disk with DOS on it and 
urite the 24 memory page.s S~iB(Wl to SySFF to 
the "Cracked" di.sk using the following table. 



Track 



iector 



Meinorv 



18 


E 


7Ee0 


IS 


D 


im 


la 


1 


mm 


18 





mm 


19 


F 


m 


19 


E 


mm 


19 


8 


9*«tf 


19 


7 


9500 



Boot the "Wiirking" disk again are.! 



type $C0E8 from the monitor to stop the drive. 

I_5 I Relocate the block from S9600 to 

$AfiFF to loucr tnemory to preveitt it from 
being overwritten by DOS. 

S66IIII<S963a.AeFFM 



[ 



BiKH the DOS disk again and write 
the 17 memory pages S96tW to SAfiFF 
(relocated to $66tW to 76FF;i to the •"Cracked" 
disk using the following table. 



Track 



Sec -or 



Hemo'-y 



19 


5 


6600 


19 


5 


^a 


19 


1 


mf.: 


19 





^m^ 


lA 


F 


mm 


lA 


E 


^M. 


lA 


7 


ms 


lA 


6 


^6ea 



The following sector edits should be made 
to the "Cracked" disk. 



To bypass the dectxiing loop. 
Track Secto' Stan Byte Fron To 



SIS 



SF 



$22 



A0FfB9 4C(32 7E 



1 1 To disable the disk check routine. 

Trach Sector Star: Byte From 'a 



IIA 
HA 



S8 
S9 



SIB 

Sr9 



86 Fi 
86 Fl 



EAEA 
EAtA 



{^Ht, 



o disable the Jumps to the reboot 



routiiic. 










Trac«( Sector 


St 


art By:e 


From 


To 


S19 S2 




S74 


4C4SA4 


EA EA EA 


S19 SA 




S7S 


4C 48 A4 


EA EA EA 


SIA $9 




586 


4C 48 A4 


EA EA EA 


SIA SE 




573 


4C 43 A4 


EA EA EA 



QTJ 



Boot yuar "Cracked" disk and 
enjoy the delights of the mansion Be sure to 
tell Mabel that "Dave sent vou". 



Roman Drozd 



Softkey for.. 



TelePorter 



■ Keqiiireineiits: 

tH Your Apple II 

D Copy program that can copy selected 

tracks 
Sector Editor 

Tek'l'nrter i.s a rather old communications 
program, but 1 got my hands on an original for 
couple of days and decided to make a back-up. 
[ used Es^emkd Dma Duplcolor lEDD) and 
Copy fl Plus to break my copy, and it works 
tine, but any other equivalents will do. 

The Crack 



Disable the checking routine at the 



end address markers. 

Copy the disk norma] ly except for 



Track $0F. 

I — I Now boot your sector editor and 

make the following changes: 

"^rack Sector Byle(s) Fro.-ti 



To 



S00 



503 


535 


ED 


DE02 


02 


SF9 


90 


09 02 


153 


561-62 


00 BF 


84 9D 03 


0F 


512-13 


D0 0B 


EA EA la 


03 


S5E-5F 


D0 31 


EAEA 



[ZZ] 



'I'he volume number on your copy must be 
064 of the program will nut run properly, so 

w-atch out '.'. You may also v\ish to re-tormat 
track S9F for better copies. Enjov the crack. 

Softkey for. . . 



Megabots 

Neosoft 



■ Kequirfnienis: 

;■ : Apple II. II Pius. He. or lie 

\. . Blank disk 

Lj A lile copier 

D DOS 3,3 

Megiihots is a keyboard-controlled graphic 

adventure in which you are a robot searching 
to find the hidden power source in a five level 
complex, While the graphics and sound are 
gotxl. the game is rather slow, and lacks good 
play ability. The game uses much disk access, 
and if it isn't backed up, the disk will wear out 
inside of a few months of play. 

The Protection 

The original is written m near DOS 3.3 
format with only slight self-sync byte 
alterations. The actual game program does 

checks on DOS to see if it's written in the exact 
same format as the original. When you copy 
the disk iioriiially. it will just hang into an 
endless drive spin. This suggests that the 
original could have been recorded with a very 
fast or skw drive. 

The Procedure 

r * I Boot a DOS 3.3 disk 
I ^ I Enter the monitor: 
CALL-151 



Change a clear-carry mstruction to 



a set carry instruction. 
B942:1S 

I ^ I Tell DOS to ignore any read errors. 

B9eA:g» 



I ^ I Modify track Sfl's error-checking: 

B9gC:18 6a 
BE48:18 



L? I Back to BASIC 

3DBG 



All done! 
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INIT HELL0.V254,D1 



8 



DELETE HELLO 



1« 



Nuw run a file copier such us FID. 
md copv all t'lU's t'nim thi^ (iriginal to the 
IMTiali/cd disk. 



11 



PIW6 

All fiiii.'ihed! 

You are now spared all the dnve m<ijning 
and iiroaning of syne-lrafk copiers. Akhough it 
isdepmtccied, ihi.s program hkcs ii's own DOS, 
iuid will not work wilii I'asL DOSes w illn.)ut smiie 
riioditk-alions to the ANAL.DROIDS i'lles' 
DOS check ini.' routine. Quite a task! 

Hnjoy the cracked \ersion, and the time saved 
sending for a replacement! If only all wares had 
this protceticin... 

Command Summary 



[SP.^Ca Sckci weapon 

111 Fire weii|>on ^1 

Fire weapon ft! 

Look (or power source in this 
room - go right one room 

I 4 I Go left one room 

I 5 1 Move up one room 

I 6 1 Move down one room 

Ask rohot for directions to the 
power source 



8 I Oel recharge nl'f dead robot 



Brian A. Troha 



Here are a tew .soflkei s I would like to pass 
on. 

First, I must have a ditYereni version of 
World '\ Gn'Mcst BiiM'tutl Gtitne. It says: 
enhanced version. 

To sofikey this disk vou must gel it in a 
normal forimt (see c'OMPUTIST 33), 1 
cheeked the protection code on track 50. sector 
SI and found the protection C(xie re.sides at 
SD7O0-D7FF and is run right after the first boot 
stage. When the protection passes it loads 



physical sector $8 in $D7O0-D7FF and runs it. 
I ju.st loaded in physical sector S8 (DOS 3.3 
•sector $B) and wrote it out to sector SI of track 
$0 The sector should start with "SK EV D7 

8t F7 D7". .After comparing the softkey for 
C./. Joe. a similar method should work, 
allllough the sector luiglit liave D4's instead of 
D7-S. 



Softkey for. . . 



World's Greatest Baseball Game 

Epy X 



LJ^ I Boot DOS 3.3 

I a I Type: 



CALL 451 
6942:18 
RUN COPYA 

L_~ I Copy BOTH sides of the program 

disk 

L ^ I With your sector editor fside I . di.sk 

A), read sector $0B. track SO and write it to 
sector S01, track S0 

Sofikey for... 



Hardball 

.'\ecoljde 



Run COPYA 

Change: 



Trdci StJCtCr BytetS) Frcm 



To 



SB 



$B 



54C-4E 20 60 82 EA A9 00 



This overwrites the call u> the protection and 
sets the Branch EQual to pass. 



Sofikey for.. 



Rambo: First Blood part II 



Mindsc;tpe 



L5 I Hoot DOS .v3 

Type: 



] 



CALL-151 
B942:ia 
RUN COPYA 



l_? I Copy the disk 

L^ I C'hanse: 



Track Sector Bj'tei.s 
~$0 



From 



se 



SlB-10 20 00 0B 8O7B04 



See Kiiiu-r in COMPl'TIST 42 and also 
American Chii!k-n,i:e in COMPL'TIST 40. All 
three programs arc from Mindscape and ail use 
the same proteclii>n. The article about AtxerU'an 
Challenge is another way to break the same 
protection as both methods will work on 
Rambo, the only difference is the code is on 
Sector $A. 

Llsing information from previous issues I was 

able to softkey the above programs. So it helps 
to keep (and reread) all older issues of 
COMPLTIST. With that I haw one question: 
Wluil happened to the Most Wanted List? One 
last thing: If any reader would like to talk 
■■COMPL'TIST' ■ talk please send a Icner to: 

Brian A. iroha 
2745 Alice Circle 

Stoughton. WI .'i3.^^HQ-3353 



S. Todd Grant 



a note on Doctor r)estnjctions\... 

lltima IV .\PTs 

COM PU "LIST 42 Page :i 

Doctor Destruction's Ultimo li-' .^PT's 
(COMPUTIST 42 page 21) should come in 
hand> for those v-ho don't already know them. 
but he or ^he left out a couple of details. 

From Jininiiing to Dispelling 

First, you will need a key to (J)immy the lock 
of the dcHir that leads lo the dungeon entrance. 

Second, by ha\iiig a character stand on the 
lower right hand corner of the ■'treasure 
room" the energv field is automalicalK 
dispelled; n<i need for a spell. You only need 
Dispel! if you want to kill the Bairon in the ne.xt 
room over, to help your valor virtue, and to 
avoid the poison field on vour way in. 

By the way. 1 vote to keep COMPUTIST 
strictly .Apple. Any effort to cover other 
computers would he I ru it-less. 
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Jim S. Hart 



Softkey for... 



New Oregon Trail 

MECC 



■ Reniiircments: 

D The vVfu' Oregon Trait original disk 
ET 2 bktnk disk Mdcs 
C Super JOB vl.5 
[Z a .scclur cdilur 

7)ie A'eiv Oregon Trail is an educational game 
by MECC. Yciur job h to pilot a group of 
settlers through the old west's Oregon Trail. 

.\limi; the Viny vou must make decision.^ 
L-oneerning the supplies to tLike along, when to 
hunt tor food, and whieh trail to take, among 
others. 

The game is a delight to play with the quality 
hi-res graphies screens itiat are j;enerously 
sprinkled throughout it. 

A lew things, .sueh as starvation and 
mechanieal problems with the wagon, oceur 
randomly and at times will drive you up the 
wail. For example, you die of starvation just 
20 miles Iroin the end even though your food 
supplies arc wcil stocked, .\side from that, the 
game is a gem for tliose who have 
"young-uns". 

The back of the package tells you tiiat the 
diskette is unconditionally guaranteed but 
nowhere m the accompanying booklet does it 
say anything ahoui backups. 

I'd rather not pity extra money anyhow so 
1 went about dre task of dcprotecting the disk. 
Not only is it cheaper than sending off for a 
backup, the deprotected copy is more reliable 
than the original and 1 also get the chance to 
do this writeup for COMPUTiST! It's a great 
way to get your friends to be envious since it's 
YOUR name that is in a nationally distributed 
magazine. 

Onward! 

The Protection 

Looking through my back issues of 
CO.VIPUTLS r , 1 found a letter which said that 
MHCC .sotiware could be backed up by using 
the disk's RWT.S in a swap controller and then 
adding a normal DOS (3.3, of course). 

l;as\ enough, 1 thought. An hour later I still 
couldn't get the darn controller lo work. 

Ihe RWTS looked standard enough to use 
but closer inspection ruled it out. Well. 1 spent 
the next hour using my tnisty nibble editor to 



check out the disk's format on ever) track. The 
epilogs and checksums were fine on both sides 
but the prologs had been altered as foliaws: 

Table 1 



[Z 



Side =* TracK(s) 



1 S00 no'mai forrrat 

S01 - S22 address prolog I AA D5 AD) 
data proloi (D5 96AA) 

2. S30 rorrna! format 

S01 - S22 address pro' og (AA 05 AD) 
ca:a p '0 loi i D5 95 AA) 

It isn't hard to install these changes into a 
controller. 1 made the required changes and 
ignored the first three tracks [we don't wani 
their DOS, do wc?>. 

After the disks had been convened to mimial 
DOS 3.3 format. I added norma! DOS to tlie 
disk and made HELLO the btxil up program. 
Now it uas time for the acid test: tr> out the 
deprotected disk. 

A couple of hours of code searching and 
many unpleasant words later, I resigned mysetf 
to the lact that this disk needed its own DOS 
to iiperate. Ccpy I! Phis' track. '.sec tor mapper 
showed that tracks S63-S08 were marked as in 
use hut there were no corresponding files tor 
those tracks. 

The Ort-ifim Trail DOS must be loading 
something important off of these tracks. 

Going back and modifying the Super lOB 
controller so that it would now copy the whole 
disk, 1 deprotected the original once again. 1 
knew that I would have to find where the disk's 
read routines were so that they could t>e 
modified to work with normal DOS disks. A 
search for the byte sequence 8C C0 ($C08C - 
the common memory reference for disk reading 
reversed), found the routines in track S00. 
sectors $O6-$07. 

A few sector edits later. 1 had a perfectly 
functioning backup. 

To sec what is contained in the BASIC 
program files, boot up normal DOS .V3 and 
load any one you want. 

Whoever wrote (ircgon Irtiil had a slick 
ampersand package because the programs are 
littered with ampersand calls that merge BASIC 
programs, check the disk to see which side it 
is, and many other jobs. 

Some enterprising COMPUTIST reader may 
want to find out where the ampersand package 
resides, how to save it as a BLOADable Hie, 
and 11 nd out all of its functions. That would 
make a great anicle. 

I * I Write-protect both sides of the 
orimnal Ore(;on Trail disk. 



The controller will deprotect both 
sides. Install it into Super lOB. Answer YES 
to 'Format Backup'?'. 



Boot up your favorite sector editor 
and make the following changes to side #1 of 
the copy: 

Track Sector Eyteis) From To 



S00 


05 




85 
S8B 


96 AA 
AA AO 


see 


07 




SIF 

m 

J98 


96 AA 
AA AO 
AA D5 
05 AA 
AD 96 




1 Hid 


e the 


original a 




1^ 


nd enjny vour 


backup. 




Controller 



1000 REM OREGON TRAIL 

iai0TK = ;LT = 1 ST = 15:LS=15 CD = WR 

FAST = I 
1020 GOSUe 490 : GOSUB610 
1030 GOSUe 490 ■ GOSUB610 IF PEEK (TRK ) = 

LT THEN 1350 
1040 Ti^ = PEEK (TRK ) -.ST - PEEK (SCT ) GOTO 

1020 
1050TK = 1 :LT = 35 ST = 15 :LS = 15 :CD ^ WR 

FAST = I 
1060 !?ESTORE : GOSUB 190 : G0SIJ8 210 
1365 GOSjB 490 GOSUB 510 
1070 GOSJB 230 ■ GOSUB 490 ■ G0SU8 S10 
1075 IF PEEK ;TRi< l = lT THEN 1090 
1080 IK = PEEK (TRK ) .ST = PEEK {SCT i . GO'O 

1060 
1090 HOME .PRINT "COPYDONE." : END 
5000 DATA 170 ,213 .173 ,213 .150 ,170 





Controller Checksums 


1000 


- $356B 


1055 - S6213 


1010 


~ $EA41 


1070 - SE051 


1020 


- S3164 


1075 - S002D 


1030 


- 35£3F 


1080 - SI AAA 


1040 


- S3A08 


1090 - IBDEB 


1050 


- S5B67 


5000 - S49CA 


1060 


- JA3CE 


- J0000 



Softkey for. . 



Paul Whitehead Teaches Chess 



r.nlightenmcnt 



■ Requirements: 

n Paul Whiteheuit Tenches Chess original 
D 4 blank disk sides 
C COPYA 

Lj a sector editor 
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Paul Whitehead Teaches Chess is a chess 
tutor for beginning to middle level ehess 
players. The program is well laid out ;ind with 
the Road Map that eomcs in thi" package, ii is 
ca.sy lo get It) ail) leamre Ihai the progriini 
offers. 

Also included wilh the tutor is a ehesi 
opponent natned "The Coffeehouse Chess 
Monster". It's been a few years since I have 
played the game ol kmgs and "The Monster' ' 
iuve me quite a tussle when we played. 

Thi.s package is recommended for beginners 
and players who think thev kntiw^ it all. 

If )our disk dies within three months of 
purchase, a tlvc dollar processing fee and the 
blown disk will get you a backup. Complete 
hackups (includes disk and docs) are available 
for S25. 

While this is not a bad policy. I prefer my 
ow'n: remove the protection and not send them 
any money when my original dies. What? This 
sounds like something for CoiiiputistI 

The Protection 

In the pamphlet with the warranty and 
liability slatemenl. Enlightenment Inc. states^ 
that ""We have chosen a copy protection scheme 
that will not harm your disk drive". Nowhere 
is it mentioned what the poor disk must go 
through each time it is booted, however. 

Loading up the trusty nibble editor, you find 
that track SW') is normal and thai the rest of the 
tracks are protected. The protection consists of 
the third byte ol the data prolog bemg a different 
value on each track. No problem to t'w that: 

POKE 473S8,1 
RUN COPYA 

Follow the above privedure to copy each of 
the four sides onto the four blank sides. The 
poke disables the check for the tliird data prolog 
byte which means that it now accepts any byte 
found there. Put the originals away now and 
let's concentrate on the copies. 

Nonstandard data prolog 

Since the onginal.s were written with a non- 
standard data prolog, there must be a routine 
to read this fomial on the disk. Umking for disk 
access code on the copy, it shows up in two 
areas: track S00, sectors S15A and .Sl5B. 

After an hour of studying the code, I figured 
that the code on sector $0.^ was a pioteetion 
scheme (nibble count perhaps'/) and the code 
on sector SBB was responsible for loading the 
program into memory. 

Disassemble the code in sector S0B and you 
come to a section that reads the data prolog 
(around bytes S40-S6OI. 

Notice that in the check for the third byte, 
at bytes $SS-S.')A, a distinct value is not used, 
A memorv k>cation is used instead. Lets fi.x it 



to read a normal DOS 3.3 format: 

Sector edits; 

Tracn Sector B>'te(s) From 



To 



sae S0B $58 - S5A CD CO BD C9 AD EA 



The copy now has the ability to read itself. 
Booting it up reveals a na.sty surprise: it loads 
a bit of code and then reboots. 

Ah Hah! Sounds like a nibble ciiunt.'signature 
check not being satisfied. Scanning the disk for 
a jump to the disk controller card (4C VA) C6) 
turns up nothing. 

An alternative is to disable the protection 
scheme located in track $00, sectors SOD & 
S0A. Several fruitless hours were spent trying 
lo do this. 

However, if you look at track S00, sector 
$0A, around bytes $AH-$C0, you will notice 
that the RESET vector is changed and then an 
indirect jump is made to the ROM RESET 
vector at SFFFC-SFFFD. 

Study this code for a minute and you will 
discover that this is where the rebooting takes 
place. The RESET vector at $3F2-S3F3 is 
scrambled and then jumped to indirectly 
through SFFFC-SFFFD. This causes a reboot. 
Lo<.>king up a bit earlier in the cede shows that 
the RAM card is turned off and the motherboard 
ROMs enabled (at bytes S^F-SAl), 

This looks like a good place to change and 
fix It .so that it returns with the carry flag cleared 
(as a measure of .safetvi: 



Sector edits: 






Track Sector Byteis) 


From 


To 


$00 S0A $9F - JA0 


AD 82 


IS 60 





The reward for all of this work is that the 
copy now functions fine. 



Cookbook Method 



rr3 

POKE 45358, » 



RUN COPYA 

and copy all tour sides 
L ^. . 1 Sector Edit: 

Track Sec^3r Byte(s) Froir To 

sae S3A S9F-SA0 
S00 S0B J58-S5A 



AD 82 18 69 

CD90BD C9flD£A 



Soflkey for. . 



Award AMer Plus 

Baudville 



■ VVhitl's needed: 

n Award Maker Phis tiriginal disks 
n 4 blank disk sides 
U a whole-disk copier like CC)P"V'A 
n Pro DOS User's Disk, //e System 
Utilities, or ProDOS C<>f)\ U Phis 



Award Maker Phis is Baudvillc's entry into 

certificate making. Those who have used 
Cenifiatte Maker will immediai.ely recogiu/e 
the similarities in the two programs. Award 
Maker Phis does one thing that Cenificah' 
Maker will not: it will print your certificates 
in color and supports color printers sucii a.s 
the ImagfWriter U for the printing 

This is an excellent program for thu.se whu 
want to reward others for achievements or ju.st 
to say "thanks ". 

The disk is in ProDOS furmai ( ProDOS 8 
to be exact) so naturally unc would think there 
was no protection. 

COPYA has no trouble making a copy of all 
four sides. Everything seem.s to be working out 
just fine until you try to print an Award. This 
is where you discover that the disk is protected. 
The message "Award Maker Plus by Haiidville 
- Use original disk" appears on the certificate 
instead of the one you selected 

Hmnim. Reading through the Award Muker 
Pius Special Instructions reveals that a hard disk 
version is available upon receipt of your 
"Warranty Registration card, 'Hard Disk" 
implies unprotected but I would rather not have 
to wail. Sounds like it's COMPUllST time. 



The Protection 



That's all I Enjoy your backups. 



Since the disk is COPY.-\-able, no I'orniat 
alterations have been made so wc don't have 
to worry about that. 

A nibble count.'signaturc cheek is the likely 
culprit. Looking at a disk map of side A with 
Copy U Plus, it seems a little (xld that the 
ProDOS system file is on the last couple ol 
tracks. It usually is on the first couple of tracks. 

Also odd IS that although everv block is 
marked as used, a lew on track S4W are not used 
by anything, directory or l~ile-wi.se. A search 
of the disk for direct disk access code reveals 
some on track %liWi (in those "unused" areas) 
and some in the ProDOS system file. 

After many hours of studying anti changing 
the track S0O code. I still could nut get the disk 
to work. Cictting a bir desperate, I tried 
something that looked to have a good chance. 
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Since the Pro DOS sysit;in file was located in 
an odd place, and there was some odd Lode on 
Iryfk ^X1, whv not format a !*roD(JS disk, copy 
a normal ProDOS system file to i[. und [hen 
copy all of' the other files trom side A to the 
newK formatted J iik .' 

May he it was during the hoot that the disk 
check was taking place; and if a normal hoot was 
used, the program would think evci^'thing W'as 
OK. I did this and sure enough, the copy 
functioned perfectly now, 

Mavhe there is a "eute" way ot 
clreum%'entmg the protection scheme, but this 
method allows you to put your A\^iird Mukt'i' 
Plus on a hard drive if you want, and there is 
no waiting jieriod! 

Cookbook Method 



Copy iides B.C. and D of the 



originals onto 3 of the blank sides using your 
w'hole-disk copier. 

I ^ I Using your User's DisL'System 
Utilities'D)/7y // Plu.',, format the other blank 

disk side and name it .'A. 

L? I Copy the ProDUS system file oil 

of your copier onto /A. 



[ 



Copy all ol the files, except the 
ProDOS system file, off of side A of the 
original onia /A, 

I ^ I Rename /.A to /.AM. .41 and you 
will he done. Enjoyl 



.\PT for. 



Altec 



Duuimi'it 



■ Needed: 

n Unprotected copy of Aztec 
□ Sector Editor'Disk Searcher 



It you've ever played Datamost's Azier, you 
know how frustrating it is to die because you 
have iTin out of strength points. 

I usually gel hallway through a level before 
my points run out. Wanting to fw this. I went 
about looking through the Azii^i-' code to see if 
there was a solution. Here is a short synopsis 
of what I found: 

S8W*-$9FF is where game variables are 

kept 
$9En is where the strength pwints are kept 



SSE5 is where the sticks of dynamite are kept 
$6596 is where the 'death' routine starts 
SIBM IS where the game setup starts for a new 

game 
SlBtlS IS where the game setup starts for a 

restaned game 

Tr!j>-k\ $J2-$22 is where the program code 

resides 
Tracks $63-S05 and $07-:iil0 are the game 

boards 
Track SI I is a dummy catalog tor hackers to 

look at 
Track $06 is the real catalog 

2 version.^ of ,'\ztet 

There are two versions of Azice out: One that 
is easily deprotccted (POKE 474:6.24 style) 
and one that is extremely nasty to back up. 

My version is the easilv deprotected version. 
If you have this version, copy a fast DOS onto 
it with Copy II Pliii or equivalent and copy 
Track S»6 to Track Sll. Now change the 
catalog proinier in Track $11. Sector StW. Uytc 
$0 1 from $06 to S 1 1 . There are two good files 
on the disk and one unrecoverable deleted lilc. 
You will onlv see die file -STARTER" (binars 
file) on the catalog, but using a program that 
scans the disk for Track-Sector lists w'ill reveal 
another tile wTilten in liASIC. 

The strength points and stick of dynamite are 
both initialized in the same place. I'he totlowing 
c(.xle does the work: 



A9 03 


LDAfS33 


80 EO 05 


STA 509ED 


8OE5 05 


STA S03E5 



This etxle is found (on my disk) at Track 52 1 . 
Sector %m. Byte .SH*^ Changing the {)?■ to M 
will give you 9 strength pi>ints and 9 sticks ot 
dynamite to sian the game. Do not, however. 
use a number higher than 9. Stange things 
happen. 

Now. to find the code that decrements the 
strength points, we must look for (you guessed 
itj a decrement in.struetion that decrements the 
mcnior) location S09EL) Using the disk 
searcher. I came up with the following spots 
on the disk: 



Irack Sector 


BytetS' 


51D sei 


SA7-A9 




SAF-Bl 




SB5-B7 




SC2-C4 



From 



To 



CF ED 09 EA EA EA 

CE ED 09 EA EA EA 

CEED09 EAEAEA 

CEED09 EAEAEA 



Making these changes has the net result ol 
your strength points will not be decremented. 
You can. however, still die via a vicious attack 
or the natives getting you with their blow darts. 
Hmmmm. 

I followed the code's logic and found that a 
death (except by blowing yourself up with 



dynamite) vNouJd send you to location S650&. 
Thi.s is the infamous "death routine". To get 
rid of it, you must take out the JMP $6506 
commands and replace them with good code. 
Here are the .sector edits to make: 

Track Sector Byte's i Fron *o 



521 



s:d 



$09 I23-2i 

$52-54 

SflD 106-07 



4C 06 65 

4C 06 65 

A9flB 



38 W FB 

ISEAEA 

18 60 



If you're wondering why there are different 
bytes in each of the above edits, 1 suggest that 
you look at the code around the ediis. 

For example, the change made at '['rack $2 1 . 
Sector $09. Bytes 523 -2"5 are from 4C 06 65 
to 38 Bi) FB. Righl before the JMP $6506 is 
taken, a comparision is made and if the carry 
Hag is set, everything is OK. If not, the JMP 
S6506 is taken. This tells us that the carry (lag 
should be set in place of the jump and the 
program flow should be rerouted to the check 
again. 

Looking at a disassembly of the cixle I' in 
talking about will clear things up, so take a 
peek. 

Hope you enjoy the longer life you now have. 
The only ' 'death" condition that 1 did not mess 
with was the one that occured when you were 
blown up by a stick of dynamite. This leaves 
some excitement in the same. 



Soft key for. . 



Spindizzy 

Acti vision 



■ Needed: 

^ SpinJizzy original disk 

G one blank disk 

Q A fast DOS (not necessary but helpful) 

n File copy program 

Spindizzy is a three dimensional game in which 
you control a marble or lop. The objective uf 
the game is to collect all of the jewels that are 
scattered throughout the 3S6 screens. The 
animation is gtxid and the graphics get high 
marks for being realistic. If you like this type 
of game. Spindizzy will give you many hours 
of fun and discovery. 

I had been hacking at this game from time 
to time and getting nowhere. Looking through 
back issues" of COMPL'TIST for Aetivision 
softkeys. 1 had hoped to find one that would 
work for Spindizzy. 

L(.Hiking at Alter £,^(v's sector edits, the 
FROM byte.s were exactly the same bytes as 
were found on the Spindizzy disk Making these 
sector edits did not. however, produce a 
working copy. 
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I gave up on It until COMPUTIST 43 
arrived. Jeff Rivett's soflkcv Iit Mitnk'r em tlw 
;W/i.s/.vM'p;)i rekindled niy iiuercil in LTafking 
the program. 

In his .suRkt^y. the tile wiih Ihe protection 
scheme was BOOT. Looking through all ntthe 
flies on the Spimlizz\ disk revealed that 
"SHELL" contained the protection C(xlc. 1 h;id 
hacked with tliLS particular llle before bul hjd 
gotten nowhere. 

Keeping a menuil note that the clianges in 
Jeff.s softkey started ai b\te S58, 1 looked 
ihroiigh the SHELL file at location $C58. 
SD?S, etc. 

The in.sinicijon located at SCiS was a LflA 
command, SO I tried making the changes listed 
in the Murder... Mifsi.'i.sippi softkey. 

Well, \velL..it worked! Made me feel 
grateful thai 1 kept my back issues of 
COMPIJTLST. 



Cookbook Method 



B»)ot up DOS, preferably a fast one 



like Promo-DOS or Dhvr.'.i-DOS. 
Initialize the blank disk: 



3 



INIT HELLO 

l_± I L'.sing your t~ile copier, copy all of 

the files I'roiii ihe original Spi!!di7.zy disk lc> the 
newly ini!iali;ed disk. 



place. 



'ill away ihe iiriginul in a .wff 



J Gel the 



p rot eel ion code into 



laemfin' imi/ cmcr the monitor: 

BLOAD SHELL, A$Cia 
CALL -151 



Bypass the proieciion cheek: 
from: A9 08 C6 FC DO (M C6 FD F0 

h>: A9 m H5 FC A9 55 4C 98 OC 



[Z 



Save (he docile code back to the 



disk: 

BSAVE SHELL, ASC8fl,LS22a 

Note: notice thai the changes are the same 
ones thai are in Jeff Rivett's softkev e.>;cept at 
a dilfcrcnl place in memon'. 



]y. 



)u're donel The disk now boots 
3 limes as quick and can be copied by your 
favorite disk copier. 



^^^^^^^B 


H. 


Joseph Dobrowolski 


.\ ,\ole f 


rom... 


Appk 


THREE Group International 



First, congratulations on lasting another year: 
one that saw several good publications with 
p<:)or management practices cease (many were 
TOO specific emphasizing only one machine, 
application or group of users; some were TOO 
general providing one program with 14 
m(idificatians). 

Forgotten? Apple /,'/s 

We also wish to commend vour "balanced" 
coverage; fur noi abandoning the over 100.000 
"forgotten" Apple ''" & .Appple '■" Plus iwvners 
in the U.S. alone. Many publications {& their 
advertisers) don't even acknowledge the ,^pple 
('// as a 48K Apple )[ Plus emulator so il was 
a pleasure to see you spreading the word th.it 
Sara is neilher dead nor forgotten. 

Thanks for acknowledging the .Apple '/,''s 
still alive fCOMPUTLST 24 K for the generic 
hardware anicles such as those dealing with disk 
drive modifications (Write-Proiection switch. 
Speed Adiustment Control, eic. i allow ing us to 
participate in your activities and your niosi 
recent mention of the .'\pple /.'/. "Modified FS 
ROMs On the Apple t/i." It provided much 
needed information and continues to let us know 
that COM PU LIST hasn't torgotlen us. 

Apple /// owners seem to he the "forgo lien" 
people (many c>i-custonicrs) in .Apple's 
corporate growth. The .Apple ' is iruely a 
fantastic machine; in our minds the best Apple 
ever pnxluced. .Advertised incorrectly as a 
"small business" machine only, the Apple /..■',' 
has mcreasinglv become a "personal" 
computer to tens of thousands. Many Apple 
Apple ///s were originally sold to businesses. 
When Apple decided to discontinue the .Apple 
/If (and the rise of IHM.MS-DOS) many of 
these businesses looked tor a "ta.x- ad vantage" 
in swiiehing. .Many decided lo "donate" ihem 
to schools and non-protit organii'.ations so their 
full Ikst price could be wrilten off. .As a result 
many new Apple ///ers have "inherited" 
computers without the original manuals, 
without dealer support, without ... I'm sure you 
get the picture. As a result, users groups such 
as ours have joined together lo help the NFW 
Apple .'-'ieY and through exchanging 
memberships, to help ourselves (including 
Apple /.■■/ers in foreign countries). 

I would like to shiire the following description 
of our users group w-ith your .Apple '// readers 
and welcome ihem to call or drop us a line: 



The Appk THREE News & Views 

The .Apple LHRFF Oroup Inlernalionai, 
fornierl; the .Apple ','/ Ow ners & Users Group 
International, is an independent, non-profii 
organi/alion for all Apple .■■■.ers (if you belong 
to a LOCAL Iscrs Group or are connected to 
one via a modem, greai, il' not we'll irv lo make 
you feel like >ou belong). 

Started in NK,l in Naples, Italy, we publish 
a monthly newsletter, the "Apple THREE 
News & Views," containing .'./ news gleaned 
from every source possible, attempt to ansv\er 
or obtain answers to members' questions, and 
are building a "library" of EVERY piece of 
Apple ''// Public Domain softw-arc available. 
COST? Dues are $15.00 annually in the U.S. 
(SIf) in C'anada, .*p25 loreigni. Soli ware is S3 
per disk (Members only, U.S. po.stage included; 
S3. 50 in Canada, '>7..'t0 foreign; all pavmenls 
are in Ll.S. funds). .Ask a question or leave a 
message on our phone recorder now 
1 l-Hl)4-Kf!5-7520) and look lor our BBS to go 
"on line" soon! 

Interested? Write lor an application! Already 
a member: why not let other .Apple ■'■" owners.' 
users know about us'' Post copies in your focal 
computer stores and on any BBS's you log on 
tol: 

Apple THREE Group Inlernalionai 

c-'o H, Joseph Dobrovvolski 

PO Bo\ 913 

Lanulev AFB, VA 23665 
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Michael A. 
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softkej for. 


.. fJile 



Since you gave Ltiie such a high rating on 
your games review, 1 thought it would be worth 
m_v money. Well you know what 1 think of il, 
I think that il is one heck ol'a good game. 1 )usl 
hope that there is a sequel coming and that il 
is even better than Eliie. 

Also the softkey for tliic that you published 
does NOT vvork for my copy. 

What I would like to see is a bookof APT's. 

I am sure vour other readers would like one loo. 
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David Wreggit 



APT fur... 



Ultima IV 



This Al'"l' LMiiL'LTns LHtiimi IV iind a rallicr 
bizarre use of the balkxin thyt can be found just 
outside of the dungemi ot Hvlothe (see 
COMPUTIST 4: fnr^huw m f;el 'there). 

Unusual Balloon Ride 

Aside Irom allowing a bird's eye view uf the 
world i>l' Britannia (\vhieh is quite useful for 
searching out the secrets hidden in mountains 
ranges and dark forests) it allows a per.son to 
scctningly 'walk upon the air' when properly 
used . 

Technically, the balloon is suppose to he 
Boarded and then flown and landed with the 
Klimb and Descend commands and finally 
eXiied. 

[.araling can only occur upon the grasslands, 
whicli really limits the u.set'ulness of the balloon 
since there isn't a great deal of grassland in 
Britannia 

However, the trick to using the balkxm is not 
to climh and descend with it, but to Board, 
Klinih and then eXit. Hliiiiinating the Descend 
step III ihc cniiiniand sequence provides several 
fabulous advantages for the adventurer. 



Magical Advantages 



The balkxjn can literaUy b« landed 
anywhere. The top of a mountain range, the 
middle of the ocean, or in a lava pool are not 

unreasonahic places to land. Once you've 
landed, the balloon can be left and returned to 
no matter what kind of terrain it is on. 



L_£ I .After leaving the balloon in this 

unusual manner, many of the benefits of llnating 
in the air .still applv. For instance, the 
ad\en[urer can still see into dark fnresis or over 
mountain ranges (You can't walk on water, 
[hough ) 

Poison swamp, fire 'lav a zones and other 
nasty surprises {such a.s the sleep area that 
you've got to walk though to tiilk to Hawkwindi 
don't affect you at all. 

Monsters stand still and blilhly watch as you 
waltz by them (they still think that you're in 
the balloon). 

In towns and cities, the problem of seeing 
beyond walls is eliminated since the adventurer 
can sec over anv obstacle. 



Odd Di.'iadvantages 

There are two small glitches to all this 
wonderful, new-found power of observation. 

Invisibility? 

upon entry to any v iilage. no one will move 
around to acknowledge the group's presence. 

This gels to be an irritation very quickly 
when one wants to talk to Hawkwind or any 
of the other inhabitants of the tow ns that have 
to move towards the adventurers to 
communicate with them. 

This m.ay not seem terribly ttritating, but ii 
is occass ion ally a bother. 

Dungeon Travel 

The second oddity involves dungeon travel. 
To make a long explanation short, as long as 
the group travels in a straight line the screen 
is not updated - this makes dungeon travel 
virtually impossible. 

Back To Normal 

To return to a normal mode of play. Board 
die balloon again. Klhnb to an altitude, and then 
Descend and cXit as you normally would. 

Of course, NOW ytm have to land on a plaiiLs 
area- 
Walk Through The Air 

There are a few useful things that can be 
accomplished with this awesome "walk in the 
clouds" abilitv. 



QZ] 



Entering the Abyss With the use 
of a couple of wind spells, or a lucky south wind 
from the take off point of the original balloon 
location, the party of adventurers can set down 
in the middle of the t1rc ^one surrounding the 
final dungeon of the Abyss without having to 
wade through the waters of Pirate's Cove; diat's 
the place with about a billion pirate ships that 
sink your ship faster than a piece of lead unless 
you have the famous "Wheel". 

Speaking of which, the wheel doesn't really 
help enough. Yiiu've really got [o hop between 
pirate ships and subdue them hand-to-hand or 
else try to run through all the ships before they 
start attacking your ship in force rather than 
trading cannon shots. 



[HJ 



Getting to the Shrine of Humihiy 

on the Isle of the Abyss. Anyone who has 
fought their way to this shrine without the silver 
horn, or even considered fighting the ibrty plus 
battles with daemons necessary to do it. will 
be happy to know that floating into the area 
around the shrine and eXiting will allow a .safe 
trip to the shrine and back to the balloon. 
W'ell, that's about all there is to tell about 



the usefijl auxilary function.^ of the ballon. 
The ability to get around certain areas and 

see everything that there is to see is extremely 
u.seful and I've only pointed out the most 
obvious cases. I trust that everyone will find 
it as useful as 1 did - and after over 100,000 
moves of the game, a unique way of playing 
is rather refreshing. 



Mark Swanson 



tiaS Softkey for. 



Palntworks Plus 

Activision 



PiarUKorks Plus is a paint program for the 
.■\pple llCkS by Activision. At a retail price of 
S59-S69, I hated using the original master, so 
1 set out to make a copy. 

This was my first attempt at deprotection and 
also my first experience working w- ith the GS 
in native mode. 

Hirst, I tried making a copy using the .^pplc 
1IC]S .SYSTE.M disk desktop copy function, the 
system utilities will also work. Everything 
copied except block 7, which generated an error 
when it was read. 

I btKited the copy (minus block 7), and to my 
surprise everything started as it usually does 
with the original. It tlnally started drawing the 
Pai>mvorks' screen, and when it finished, a 
message came up that said "Please insert master 
disk'. 

Well at this point all you could do was click 
die 'OK' bo.x and the program would check the 
disk (I assume a nibble count on bloci< 7i. Frntn 
this 1 deduced that the entire program had been 
copied and I was missing some kind of 
identifing marks on block 7. 

I don't have many GS utilities yet. ^o trying 
to manually copy block 7 was inipi.wsible. .Also, 
copying block 7 would only duphcate die master 
verbatim, not deproteet it. So 1 decided to 
dismantle the subroutine that checks block 7. 

I used ByteZap.Pro by Beagle Bros as a 
sector editor for a 3.5 drive. Bv changing line 
72 to read: 72 BMAX-IMH)", iiyte/ap will 
recognise all 1600 blocks on the 3.5 disk. After 
ESyteZap is running, press 'Ctrl S' and then 
press '5'. this will change the drive being used 
to slot 5. Now ByteZap will function normally, 
but it will work on vour GS 3.5 disks!! 
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By single-stepping through Paintwiorks Plus, 

(using Apple Pmgnimmfrs Workshop. a\'ailablc 
through A.P.D.A.) I was ahle to pinpoint [he 
JSR 10 tho subroutine which checks bltick 7. 
Ne\l. I scanned the disk with ByteZap l\ir 
ihal JJjR. Alter 1 found it. I changed three 
consecutive bytes (the call routine) to NCJP's 
(EA'a). 

This didn't work. Somehow the last two 
b)ies (tht; address of the subroutine) are restored 
after Pianiwirk.<: is loaded from the disk. 

Rather ihiin spend more time try ing to find 
out how the 2 hytes were restored, I decided 
to to change Lhe JSR ($20) to something ng else 
which uould not cause the program to brake 
when those 2 bvtes are restored. 

I used SKD (STA) since this would put the 
coniems of the accumlator into the llrst 
locationh of the subroutine that check block 7. 
I did this so the subroutine would be destroyed 
and any later jump to this suhroutme would 
cause a break and allow me to trace the stack 
and fmd where the jump came trom. 

To my surprise, this w^orked and there 
seemed to be no further callls to the subroutine. 
My patched copy seems to work fme and all 
functions work normally (sometimes things go 
haywire, but the original does this also). 
Obviously, the newness of the GS is showing 
in protection schemes (they seem simple). 

I also copied Tasa Times in Toneiown with 
the .Sysytem Utilities and it works line. 
However, a friend of mine can't get his copy 
of Tass Time to load and save, but my copy 
diwjs. 

1 hope your readers can use this patch I 
cringe every time I have to boot an original 
disk. And 1 will keep dcprotccting programs for 
my own persona! use as long as companies keep 
protecting them. 

■ Reciuirement: 

D Paintworks Plus 
D a blank 3. 5 disk 
n A sector editor ( must be able to write to 

a 3.5 disk) 
D + Apple IIGS System Disk or any 3.5 

disk copy program 
D About 5 minutes of your time 



Step by Step 



[JUus 



ing the GS System Disk, (or 3.5 
copy program), copy the original Paiiuworks 
/■/av disk onto the blank disk Ignore the error 
on block 7. Use this copy for the following 
steps. 



Using a 3.5 disk sector editor, go 
to block 68S (hex S2B0), pan A (the first 2.56 
bytes). Next find byte #43 (hex S2B) and change 
it from 32 (hex $20) to 141 (hex $8D). Write 
this bkx;k back to the copy. * 



Boot and use your dcprotected 



Painlwurks Plus I 

* If you have trouble getting a sector editor to 
work for the 3.5 disks, try this. First copy 
(using Apple 11 GS System Disk) the file called 
"Paintworks" onto a 5 I. '4 disk. Now use your 
favorite sector editor to do the patch described 
above. The byte to change won't be in the same 
location, so use the editor to scan for the 
occu ranee of tfie bytes 32 106 09 (hex $20 6A 
09). and then change the S20 to SBD as 
described above in step 2. After you finish step 
2, copy the patched Painr-nwks tile back to the 
3.5 disk. 



John Wiegley 



■ Requirements; 

!_' A Sector Editor 

L A copier which will ignore error.s 

L Copy 11 Phis Version 6.0 or better 

\Z A blank formatted disk 

C COPYA 



Soflkey for. . . 



Arctic Fox 

Electronic Arts 



This program took me seven months to 
dcprotcct Copy witfi a copier which will ignore 
errors. .Make the following sector edits: 

Track Sector Byte(s) 



To 



m 



$06 
10A 



08 
5A 



62 
EA£A 



Sofikey for. . 



Might and Magic 

Activision 



This program however took two minutes to 
dcprotcct. Copy with a copier which will ignore 
errors. Make the following Sector Edits on Side 
A: 



Track Sector Byteis 



To 



03 



90 



Copy the other sides with any copier, 
Sofikey for... 



Amnesia 

HIcctronic .'^rts 



Copy this disk with a ci)piL'r that iiinores 
errors. Sector Edit: 



TracK Sector Byte(S) 



To 



S09 JS3 



27 



60 



Soft key for. 



Blacli Magic 



Enter Copy II P/u.v's Sector Editor and go 
into the Patch screen. Choose DOS 3.3 
PATCHED and then custom change the last 
.Address prolog byte to AD and the la.st Data 
prologue byie to 9b. Make all yes.' no questions 
ansvver no. Read Track 1, Sector to see if it 
worked. Then go to Manual Sector Copy and 
change these parameters: 5y^AD, 77 = FF. 
Copy tracks 1 to 10 and then track 12 to 22 onto 
the blank formatted disk. 

Go back to the .sector editor and go to the 
Patch screen. Ch.xwe rK.>S 3.3 PATCHED and 
go back to Manual .Sector Copy. Don't change 
any parameters and copy TrLick 0. Then go back 
to the sector edit and make the same patch 
changes you made the first time and read track 
11, sector on the original. Write this sector 
on the copy. 

The copy is not dcprotected but «ill v^ork. 



William Thex 



I have been trying for quite a while to copy 
some Spinnaker Products, Well, euess what I 
learned from just looking at COMPUTIST 29. 
the only one in my possession'.' 1 was just 
glancing dirough the "readers" softkey and copy 
exchange" .section and in one paragraph, titled 
"Cookbook Instnjctii'ns". il said to enter the 
monitor and defeat DOS's error checking. 1 
thought 10 my.self humiiiinm. trickyl 



Softkey for., 



Betterworking Word Processor 



Spinnaker 
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Well, to get to the point, 1 was able to remove 
the copy prelection fnim my Brncnvorknit; 
Wind Pnicessiw IrDiii Spinnaker. 

■ Ketiirirenients; 

r 1K)S .^.3 
C COPYA 
L HIJ 

C 1 blank di.)ublf-iided disk 

The way 1 remov ed the copy protection may 

seem a little ainalciirish hni it works' 

I 1 Enicr the iiutiiiior. 

CALL-151 



B942:ie 



Kill DOS error checking. 



I Brun FID. Use the wrldcard option 
= ) to copy all the file*. 

Ta-da! .No eopy-protccEion incaio!). 



c 



Run COPYA, make sure DOS's 

error checking is siill dead. Copy side two of 
the disk. 

You can just copy without removing the 
protection by following only steps 1. 2 and 4. 

Well 1 just had to share this with you people 
since you arc the ones that have inspired inc 
to really work at copying that program. You 
know v^hal is funny. I never really liked thai 
word proccs'ior anyway. 1 use Bimksucct Wriscr 
and Amili'wirks more Ihan I ever use 
BcttfrWorkini>. 



Nother Anonymous 



Sijfc/r, 



MBrble Madness 

Electronic Arts 



■ Rctiuircmcnts: 

U 64K Apple )[ and up 
n Copy program 
n Sector Editor 



Frrst, without the aniele bv Steve and Rod 
Smith in COMPUTLSr 24, Page 10, this would 
not have been possible for me. Il was through 



their complete explanations thai this softkey was 
possible. 

Marble Mildness can be copied with any copy 
program that can accept track errors. For 
fJianiple, Copy II I'his disk copy or l/icksmith 
Fast Copy 

First, formal a blank disk. 

Second copy both sides of the original to the 
fortiiatted disk. Track f> of the first side will not 
copy, but is not needed, so do not be concerned. 
The second side is not copy -protected, so no 
mod itlcat ions are needed. 

Using your sector editor scan the di.sk for the 
bytes S4C 69. 1 found them at the following 
locations: 



Traci Sectcr Bytes 



S01 
S01 



S3C 

sac 

SSF 
S0F 



S33 04 
559-72 
SOa-(34 
559-72 



Or ig.iai Hex Vs yes 

4C 59 05 fla 
4C 59 05 04 
4C 69 A0 A0 
4C 59 AO 04 



I'sitig the mlbrnialion for Mssrs. Smith's 
aniele. the nc.iii job is to delete the call lo the 
nibble count while maintaining the balance they 
discuss on page 12. 

Not being able to think in hex, I converted 
all he.K to decimal. These hex-decimal 
conversion tables arc found in most copy 
program manuals. Since the number w-as small 
enough when added, i needed to utilize only tiic 
first three bytes. The conversions of hex to 
decimal are shown below. 



HEX 4C - 69 + 05 ^ 
HEX 4C * 69 + A0 ^ 



DEC 76 + 105-5= 185 
DEC 76+ 105* 150 = 341 



To skip the Electronic Arts protection code 
we need to change the call to the protection (the 
4C 69) to an 18 60, but we also need to add 
a number to it to make it "balance". To do this 
we must use the first three bytes, subsiituling 
1 8 6t) for the 4C 69 Where the first three bytes 
total to IH6 (Track SUl, sector WC) we musi 
add a he\ number whose decimal equivalent 
will bring the total to 1K6. 

HEX 4C + 69 + 05 = DEC 75 + 105 + 5 = IflS 
HEX 18 + 60 + ' = DEC 24 + 96 + ' = 186 

Solving for the unknown value, wc find it 
to be 42 decimal which looking in the 
conversion table is hex S2A. Thus where the 
protection is 4(." 69 (13. wc now substitute IS 
60 2A, 

We must do the same w here the eixlc totals 
are 341 (Track S01, Sector S0F). 

HEX 4C » 59 + AO = DEC 76 + 1@5 + 160 = 34J 
HEX IS - 50 ( ^ =DEC 24 • 95 - ' = 3il 

Solving for the unknown value, we find u 
to be 221 which looking in the conversion table 
is hex .Sf)D. Thus where the protection is 4C 
69 AH we now substitute IK 6ti DD. 

Congratulations! You just made it possible 
to let the kids plov with another game without 
worrsing that they might ruin the disk. 



Summary 



VA I Format a disk with DOS 3..1 (Both 

sides). 

I ^ I Copy both sides with a disk copy 

program which ignores track errors, 

L3 I With a sector editor, make the 

following niiidiricalions to vour copv of side 
one: 

T'acrt Sector B/ieis) Froit! To 



S01 


S0C 


500 


4C 


18 






i«l 


69 


60 






m 


05 


tk 






m 


4C 


18 






170 


69 


60 






$71 


05 


2A 


01 


0f 


500 


4C 


18 






$01 


69 


50 






$32 


AS 


DO 






set 


4C 


18 






%n 


e$ 


£0 






in 


Al 


tk 



Soft key for. . 



Bookends Extended 



Bookciuh Fjnendrd may be copied by 
searching for the sequence BD 8C C(.1 1(1 FB 
49 D5 DO F7 and changing the final byte (SF7) 
to S56. On mine il was on Track IW. .Sector OF. 
Byte 0D. 

Also, why isn't there a most wanted list 
anymore? 



Walter Scott 



A note on the sofikey for. , 



Fantavisfon 



The Fanmnswn softkcy (COMPUTIST 30) 
will not work on the "authorized" backup copy 
of the disk. So. using TRAX from fitij; of 
Tricki. 1 found that the epilog marks have been 
changed. 
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To make the softkcv work von just change 
line 1130 to: 

im DATA 222,17g,222,17e 

The rest of the softkey works like d chann. 

a note on... 

The softkey for... Masquerade 

, COMPUTIST 35 

Nexi. I would like tg eomment on the 
Masquerade soflkey (COMPUTIST .^5). 
WTioever wrote that iotlkey, was not ver\' clear. 
! still don't understand what he was trying to 
say. 

A misprint in the so/tkey for... 



Auto Due! 

COMPUTIST 36 



Also the Aujo Duel softkey (COMPUTIST 

36) had ii miiprim. In step 4, it said to ni;ike 
some sector ijdits to the disk hut failed lo say 
which tritck and sector to nxKlifyl 

I found out that it is supp<ised to be Triick 
$17. Sector W7. 

In closing, 1 would like to reque.st a reprint 
of the "C SAVER" program. In the reprint ol' 
Super lOB V I ."^ in CO.MPUTLST No 32, it 

should have been included, in ni) opinion. 

P.S, Does anyone know how to backup 
Infiltrator by Mind Scape .,, 



« Check out COMPUTIST 4 7 and this r^ ■. i/e 
for Infiliraior ^ofikeyn RDEXed 



James E. Mueller 



a note on Clay Harrel's. 



Softkey for... Goonies 

COMPU TLST 44. Pace 22 



On my copy of Goonies, there is a check for 
the original disk after level one. and il appears 

lo be the last one (at [east through level 4). 



If Clay Harrell would look into this, I would 
really appreciate it. 



Eric D. 



Adventure Tips for. 



Bureaucracy 

In ft"- t-nn 



To gel the mail at the mansion, nng 

the bell, hot foot in the porch, and enter the 
house. Take the picture, exit, show it to the 
macaw, take the mail. 



To yet mail from the llama, open 
the bag of llama treats. Put them in the mail 
bo.K. then take the mail. 



On all the mail vou get. notice the 



postage marks. 

I 1 Eat whatever you gel at the 

restaurant. You can't pay. so slip oul the hack 
door. 



neighbor's mail + S7S f 7 points. 



The object of part one is to get the 



To get mail at the old house, knock 
on the locked door. Go South. Show the man 
the stamp on the leaflet you received. He will 
leave, then vou can take his mail. 



Adventure Tips for. 



King's Quest II 

Sierra On-Line 



First, get the cross by playing at 

the mona.stery. 

L? 1 Then lind the door by the 

mountains. 



beach. 



Read the door, go back to the 



Get tlie indent, al.so make sure you 
have jcwelr)' with you (found under the clam). 

i— ^ 1 Find the mermaid (on one of the 



[XZI 



Give her the bracelet. Ride the 
seahorse. Give trident to King Ncpmnc. Get the 
first key. 



Tyler Van Gorder 



Softkey for. . . 



The Bard's Tale II 

Electronic Arts 



■ Requirements: 

C Bard's Tide 11 

D A copier (fa.st copier recommended) 

ZH A .sector editor 

C 4 blank disk sides or 2 double-sided 
disks 

llie Bard 's Tale II is the sequel to 77if Bard 'i 
Tide. It features very good animation and is 
good for many hours of tim . The object of this 
excellent adventure is to collect 7 pieces of the 
destiny wand and reforge them . to bring peace 
to the world again. 

The protection was simple. Looking back to 
Steve anil Rih.1 Smith's article on how to crack 
Electronic Arts software (COMPUTIST 24). 1 
scanned the disk for $4C 6V. 1 tound the 
following S4C 69 AO in track SI sector SF bytes 
S0O-02. Well how convenient. 1 didn't even 
have to do anj- math, since the .■lrc/?(^;i //softkey 
uses the exact same bytes. After a little 
investigation. 1 discovered I had only to change 
those 3 bytes. 



Copy all four sides of the Burd 's 



V^2 

Tale II with any copier you desire. I used the 
Ijirk-Wiith last copier. Be sure to label the sides 



] 



.Make the following sector edit 



changes to the BOOT side! 
Track Sector Byte(E) From 



To 



501 


I0F 100 I4C 
SQl i69 
502 SAB 


ilS 

S60 
SDD 








1:^ 


1 That's all Folks!: 
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Michael Coffey 



Soft key ffrr. . 



Poetry Express 

Mtndstape 



■ Requirements: 

11 Learning Wl-II: Poan,' Express original 
r hhink dislv 
C COPYA 



^tlttry Express \'i an ea^y-Uvllse program Oial 
makes ptieiry wriung fun Ibr even me. 

There arc cxpianarion and linc-by-lmt; 
guidance providing; help fur the beginner in 
LTcating and printing nine different styles of 
[Xjeirj-. Unforlunately, the disk is eopy- 
proteaed. and if you are having kids using this, 
weli... 

I set uui 10 diseover die ins and outs L>t the 
disk and lo-and -behold if the copy-protection 
isn't an old trick we have seen before m 
Computisi. 

The only protection it had was to change 
^ome uddresscs. 

On odd tracks the headers E>4 AA 96 instead 
of the normal D5 AA 96. 

Yoti can get around this asing the following 
method of having the computer copy the disk 
while ignoring the different address header. 



[XJ 



Boot your computer with a normal 
DOS 3.1 disk. 



[inter the monitor and alter the 
Read .Address Header routine by typing: 

CALL -151 

B954:4A C9 6A D8 EF 



[Z 



Di.'.able the address epilogue by 



Ivpins;. 
B9B6:1S 68 



COPYA 



Make a copy oi the disk using 
J Enjoy your new unprotected disk. 



Michael David 



Mort softkevs for... 

MECC software 

MECC has long been a respected name in 
educational software. However, MECC appears 
10 have little regard tor the teacher's dilemma 

of not enough money to buy back-up software 
and the mability to copy MECC software 

quickly and easily. 

Softkeys for... 



Addition Logician 



Writing A Character Siietcb 



Writing A Narative 

MECC 



I was recently given three MECC programs 
that could not easily be copied. They had 
l983-iyK4 title pages, and appeared wonhvvhile 
enough to attempt to crack them I prepared for 
a long, arduous cracking session on the 
following: Addition Logician, Writing a 
Character Sketch and Writing it Nurrulive. 

This was not to be the case. In fact, the a.se 
of a nonmaskable interrupt and RWTS saving 
was not necessary . Using Super lOB and the 
lines listed below, the programs were cracked 
in less dran 2 minutes. 



Step-by-step 

Load Super lOB VI. 5 into 



memory. 

L^ I Delete lines ViMi through 9999 by 

typing: 

DEL 1M(I,9999 



EH 



Enter the new controller. 



Controller 



1060 REM MECC CONTROLLER WITHOUT Rm"S 
101GTK = 3 ,.^ = 35 :CD = rtR MB = Isl : ONERR 

GOTO 559 
1020ST = :TI =TH ; GOSUB49e RESTORE. 

GOSLIB 190 : GOSUB 210 . GOSJB 170 
1030 GOSUB 430 : GOSUB 100 . ST = ST + I . I F ST 

< 16 THEN 1030 



1040 IF BF THEN 1060 
1050 ST T0 :TK = TK + 1 
1060 GOSUB 230 :TK = T1 
10?0 GOSUB 430 GOSUB 

16 THEN 1670 
1080 51 = TK = TR+1 IFBF 

1070 
1090 IFTK<LTTHEN 1028 
1100 HOME ,AJ r "ALfDONE" 
50O0DAT.4 1/0 213 .150 ,Z13 

.222 170 



: IFTK< LTTHEN 1G30 
ST = GOSU6 490 
00 ST ^S"^+ 1 IF ST. 



^ AND TK<L'^ THEN 



GOSUB 450 END 
,170,173,222 170 



Controller Checksums 



1002 - I3b6B 1060 - S6AE6 

1010 - $5E3F 1070 ~ S22FD 

1020 - IB92C 1080 - S54D8 

1030 - JE2AA 1090 - S7FC2 

1040 - $2463 1100 - $F952 

1050 - SE2HC 5080 - JECDB 



I— ^ J Copy your favorite DOS onto the 

di.sk and boot it. 

Softkeys for. . . 



Quotient Quest 



Counting Critters 



Math Critters 

MECC 



Although this method worked well on the 
three programs as listed, I was still faced with 
the task of cracking additional MECC wares 
with copyright dates varying from 1985-1986: 
Quotiem Qne.si, Coaming Critters and Muih 
Critters. 



Step-by-step 



mzi 



Boot up the original program and 



wait until the title page stops. 



Du 



sing a non-niaskahle interrupt 
such as Witdcard, stop the program and get into 
the monitor. 



[Z 



Type: 
19(ia<B8l>0.BFFFM 



Boot up a disk with basic on it by: 



BEIB 
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Keith Parker 



^oftkey for. 



Marble Madness 

Elearonic Arts 



■ Requirements: 

□ Marble Madness disk 

D Whole disk L-opier that ivill ignore L-rror^ 

(such as LcK'ksnurh'f, fast back-up) 
D sector editor 
iZ a desire to unlock software 



When I purchased Marble Madness. 1 was 
■d bit .skeptical as il might not be as neat as the 
arcade version (which I dear!} love I. But lo my 
surprise, it was. 

Marble iVhiJness is a game in which you, a 
marble, must roll your way throuj;h a 3D 
maze. While dtxtgitig \ieious marble-munching 
ixizes (livmj; p(X)ls ot'aeid), sieelies (aggressive 
bully marbles), slinkies (cute hungry springs), 
and birds. The game is quite challenging, 
especially if you play with the keyboard. I'smg 
the joystick is much easier. 

Now im with the sotikcy. 

The protection is quite simple since it's 
almost exactly like the protection on The Bard '<: 
Tal,\ 



L5 1 Cop> both sides with your v^hole 

disk copier. Ignore any errors on track S6, 



— 1 [)n "Side ,\" use vour sector editor 



lu do the following: 
Tfack Sector ByteCs) 


To 


S@l $0B $47-48 
01 BE 47-49 


18 50 
13 60 40 



Write the sectors back to the disk. 
That's alll If there's anybody out there that 
knows how to get to the secret level, please lei 
the rest oT us iii on it. Also, I found some 
interesting text about the secret level. The test 
jusi said "Congralulaiions!" and then told the 
password to his next game, 1 also found 
snmthinj; about a "water level", possibly the 
secret level? Somehow, there's a way to choose 
which level you want to play, too. 



Dave Richmond 



I have several questions concern ini; disk 
drives and copy protection. The tlrst is fairly 
simple, what exactly are parameters and how- 
does a bit copier use them while copying a 
protected disk'' 

Second, How exactly, does the Boot ROM 
work when booting up a disk? I have heard 
several versions of how the controller ROM 
works. The first is that ROM only loads track 
%m. sector SOU into S8O0 and immediately 
jumps to %M\ m memory. The second version 
is that the RO.M finds the first data byte on track 
SHO, sector StX3 and sequentially loads in tha[ 
many sectors into jiages M and up starting with 
track $(W. sector $00 and so on. However, a 
study of the bot)t process shows that this is not 
ture. The first byte ai tracli SM), sector SW) is 
indeed the number ot pages tti be loaded in and 
they are loaded into pages 8 and up, but they 
do not come sequentially on the disk. In facl, 
some ot them even come from different tracks 
altogether and .some ot the pages loaded in to 
the computer seem to be nonexistent on the 
disk, (Note: I did snow pages SK ■ S20 with 
zeros and did a warm boot [CMWCI lo avoid 
getting bad results). Wh.it is happening? 

Also, ! wanted a backup of Gititar Wizard 
by Baudville, so 1 looked up all your softkcys 
lor Haudville software that J had. Although I 
only had one sofikey (for Take /) il worked! 
1 got it from CO.VIPUTIST 37 on page 14. Just 
follow the instructions for deprotecting Jake I. 
COMPIITIST is great despite the cost but I 
wish you'd put in more articles on copy- 
protection and how to crack it. 



Roger Roberts 



A prnbiem with the soj'tkey for.. 



Sargon III 

coMinrn.sr 20 



After deprotecting Sargon /// with the 
method described hv Kit LAI," Yu-kit and Polly 
CHAN Yuk-yi in fOMPUTlST 20. 'l 
encountered the s;mie problems that Phil Bolmg 
of Dallas. Texas mentioned in COMPUTIST 9^ 



Sargon III would begin to boot, the title 
"SARGON IB" would appear at the top ot the 
screen and then [he disk would boot again and 
again and again ... ad nauscum. 

Since 1 had jusI replaced the .Autostart F8 
ROM in my Apple If Plus uith an old FK ROM, 
I figured that the program was performing an 
F8 ROM check. 

Using Ctm- !>i<ik Seun-her. I searclied the 
first three tracks uf Sargon 111 for a reference 
to SFFFC, which is (he address for the low byte 
of the reset vector in the .'\pple |f Plus F8 ROM. 
Happily. 1 came up with a match in track (1. 
seclor 1 . Byte 1.^. 

The code looked like this: 

LDA SFFFC 
CMP *;562 

BEQ 

It seems that in the Autostart FS ROM, 
Itx-ation SFFFC contains a $62. But in the Old 
F8 ROM, location SFFFC contains a S59. 
Therefore the loop was not taken and a rebcHii 
resulted. 

In order to correct this, use the procedures 
outlined in C0.MPL:T)ST 20 in order to get rid 
of most of the protection and then use Disk tUiit 
to make I he following changes on Track &, 
Sector 1, beginning with Byie 13: 



Traci* Sector Byteisl 



F'on 



To 



sa SI SI3 


AC 


A9 


S14 


FC 


00 


S15 


FF 


Efl 


$16 


C9 


EA 


%n 


62 


FA 


This translates to; 






LDA nm 






NOP 






NOP 






WOP 







This will eliminate the l-H ROM check and 
then allow you lo play the game with either the 
Autostart or Old FS ROMs since the branch will 
always be taken. 

A Solutiun To Software That Do A 
R.\Mcard Check... suth a.s: 



Chessmaster 2m 

Flr-Ttrnnli- Arts 



.Another chess game, Ches^ifiasivr 2i'li'K) also 
does an FS ROM check. But if you have a RAM 
card in slot 0, you can fool it into thinking you 
have a normal Apple ][ Plus. 

First, start with a clean machine bv bootins: 
DOS 3,3. 
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Then, put Applcsirti in a file by typing; 
BSAVE APPLESOFT ROM,ASD9afl,LS2eM 

Then take tliat disk and uo u> soint-onc who 
has an Autostan KM ROM and after h(i<iling 
DOS 3.3, type: 
BSAVE AOTOSTART F8 ROM,ASF8M,LS8M 

NuiA put bi)di t'llca on a rL-guiar DOS 3.3 disk 
and get out a text editor that writer regular DOS 
3.3 te.Kt liles. 

Now you need to construct an EXEC file that 
will load these files into your RAM card in slot 
whenever you need to fool a program. Start 
up your text file writer and type in the 
following: 

HEW 

BLOAD APPLESOFT ROM.ASlMO 

BLOAD AUTOSTART FB ROM,A$38M 

CALL -151 

C439 N Ca89 

Daaa<lM).3FFFM 

C*8B N C9SB 

SDBG 

Save the file on your System Master Disk. 
Now whenever you need a regular Apple II Plus 
even if the protected program toads into the Slot 

W RAM card like Chessirmitcr 2000'. 




Leo & Eric Van Der Loo 



Softkey for. . 



Arctic Fox 

Electronic Arts 



The protection is similar [o the protection 
used on The HarJ'x Tale. Copy ihe disk with 
Locksmith last copy or any other copier that 
ignores read errors. Edit the copy: 

Byte(s) Fron To 



Track Sector 
Jl £E 



S47 
S4e 
i49 



23 
F8 
..10 



18 

40 



Softkey for.. 



PHM Pegasus 

Electronic Arts 



PHM Pegmus uses the well known 
Electronic Arts protection, but on bolh sides of 



the disk this lime. Copy both sides of the disk 
and use The same sector edits as in the Aniu- 
Fv.\ softkey above but be sure you edit both 
sides of the copy. 

Softkey for. . . 



The Rocky Horror Show 

Activision 



This is another of the new ..\ctivision games 
that can be copied with COPYA. The protection 
is similar to the proiection used on ixihyrimh 
and Girnt America)! Cross Couniry Race . After 
reading Mr. Nicholson and Mr. Rando's 
softkeys I was able to deproieci this one The 
protection is found on track S22, sector $09. 



I ^ I Copy Tfte Rocky Horror Shtnv with 
C(.)PYA or Locksmiih East Copy. 

I ^ I Make the following edits: 



Track Sector 


Byte(s) 


From 


To 


S22 $9 


$58-95 


11 


EA 




S96 


38 


EA 




S97 


2A 


EA 




$98 


25 


A9 




$99 


FC 


fF 



If you have a new game by Electric Dreams 
or Activision and are unable to make a backup, 
scan your disk for the above shown bytes for 
the .same copy protection. If you find the same 
protection let us all know. 

Softkey for. . . 



J-Bird 

Cosniy Corp 



At one lime I made a working copy of the 
J-Bird game, then my kids got u hold of it and 
guess whatV The copy wouldn't boot anymore. 
After two unsuccessful attempts to make 
another bil copy 1 decided it was time to 
deprotect the game. 

The Protection 

After examining the disk I found that, except 
for track $0 sector S0. all sectors had altered 
markers, the VTDC and the catalog on track 
51 1 were altered and DOS command and error 
codes removed. 

I figured Super lOB should be able to do most 
of the work. 1 made 2 controllers with the Super 
lOB Controller Writer (COMPUTIST 16). The 
first was for track $B. sectors SI to SF; the 
second controller was for the rest of the disk. 
After running the lOB's I edited sectors $0 and 
$3 of track SH and bix)ted the disk. IT 
WORKED!! 



controller: 



Run Super lOB with the following 



Controller 



1900 REM J BIRD CONTROLLER 

1310 TK^0 lT= I :CD = HR .HB= 144 

13^0 ST =1 T1=^K : GOSUB490 RESTORE. 

GOSJB :9S . GOSUe210 : GOSie 170 
1030 GOSLB 430 GOSUB 100 .ST = ST + 1 , IF ST 

< 16 THEN 1039 
1040 IF Br THEN 1060 

1050 ST =1 TK = TK+1 IFTK<:LT THEN 1030 
1360 GOSJB 230 :TK = Tl :ST = 1 : GOSliB 490 
1070 GOSUB 430 : GOSLIB 100 : ST ^ ST * L : I F ST 

< 16 THEN 1070 

108SST= 1 :TK = TK- 1 IF BF = AND TK < LT 

THEN 1070 
1890 IFTK<LTTHEN 1020 
1110 TK = l .LT-35 .CO = WR ;MB= Ibl 
1120 ST ^ 3 :T1 = TK : G0SJ8 490 RES'ORE 

GOSUB 190 GOSUB 210 GOSUB 170 
1130 GOSUB 430 : GOSJB 103 : ST = ST * 1 , IF ST 

< 16 THEN 1130 
1140 IF BF THEN 1160 

1150 ST = :TK-TK + 1 : IFTK<LTTHEN 1130 
1160GOSUS230 :TK = T1 .ST = GOSJB 490 
1170 GOSUB 430 : GOSue 100 ST = ST + 1 IFST 

< 16 THEN 1170 

1180 ST = a :TH = TK* 1 : IF BF = ANDTK< LT 

THEN 1170 
1190 IFTK< LTTHEN 1120 
1200 HOME AS = "ALl'DONE' : GOSUB 450 END 
5000 DATA 170 213 ,171 J70 .213 .235 ,222 

,171 .237 ,170 

Controller Checksums 



1000 


- $3568 


1113 


- $6335 


1810 


- $A9AC 


1120 


- $32D5 


1020 


- $B159 


1130 


- S1EE7 


1030 


- $9748 


1140 


- $0DE0 


1040 


- $516B 


1150 


- $469B 


1050 


- $1576 


1159 


- $9689 


1060 


- $28D9 


1170 


- 34383 


1070 


- $iDC: 


11B0 


- S2F1E 


1080 


- $4ACE 


1150 


- $B6DD 


1090 


- $0D14 


1200 


- $7EFD 


1100 


- $F0B3 


5000 


- S1DB3 



I ^ I Using a sector such as DiskEdit, 
read track iH, sector H from the original disk. 
Remove the original and edit the following: 



Track Sector Byte(s) 



Fron 



$0 



$0 



$4A 


AA 


D5 


$53 


D5 


AA 


$50 


AB 


96 


$as 


AA 


D5 


$91 


D5 


AA 


$9B 


EB 


AD 
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J Wi 



rue the sector lo track 0, sector 
(J of vour deprotcLttd disk. 

[Z 



Edit track 0, sector 3 

Track Sec:3r Bytefs' FrorT' 



To 



}0 



» 



SIA 



AA 

M 

MS 



D5 

m 



Yt)u should now have a COPYAble copy. 



Jack R. Nissel 



Softkey far. 



Miner imerll 

Micro Lab 



I ^ Ir.. 



.>oi >our DOS 3.3 system disk 



T>pe: 



CALL- 151 



[ 



Type; 
B942:13 

L^ I Run COPY.'\ 



Loud your sector editor ^nd make 
the folowing changes to the copy you just made. 

Traci Sector By1e(s) Fro^ To 



S00 
$00 



S32 
503 



$00 S0S 



I9E 
$35 

$38 
$39 
$JA 



05 
D5 
E7 

4C 
5A 
BA 



DE 
DE 
M 
0E 

m 

B3 
8E 



Softkey for. . . 



Bop j7 Ifrestk 

Mindscape 



L_? I Boot your DOS 3.3 system disk 

L? I Type: 



CALL -iSl 



Type: 



B942:18 

[z: 



r^n 



J Run COl'Y, 



Load your sector editor and make 



llie t'ullwoing changes lo the cupy you jusl 
made. 



Track Sector Bytei.s) 



Fro[r. 



To 



100 

$G0 



$03 
$08 



$42 
SEA 
SEB 

SEC 



38 18 

20 £A 

00 EA 

02 EA 



Softkey for... 



Destroyer 

Epyx 



[ 



Boot you DOS 3.3 system disk 



CALL-151 



Type: 
8942: IS 

\-± I Run COPYA 

L_5 I Load you sector editor and make 

the following changes to the copy you tu"'t 
made. 

Track Sector Byte(s) Froff To 



S00 I0A $7C 


A5 A9 


$7D 


F4 E7 


$93 


6C 4C 


$94 


FC 7A 


595 


IX BB 


Sorn', but 1 cannot 


remember what the x.n 


bvte was. 





Softkey for.. 



Temple OfApsbai Trikg} 

Lpy.x 



I — J Ekmt your DOS 3.3 system disk 



[ 



CALL -151 

L^ I Type: 

B942:18 



change 



L^! J Run COPYA The copy you make 

should run with no additional changes needed. 

Softkey for. . . 



Translvvania 

Pcncuin Software 



l_l 1 Install the controller listed below 

mto Super lt)B and copv the original to a blank 
disk 

I .. I Copy DOS from your 3,3 sysieni 

disk to the copy you just made 

L^ I Boot your DOS 3.3 system disk 

I 1 Type: 



NEW 



I'ype: 



MAXFILESl 

1 1 Put the copy you just made in your 

drive 

BLOAD TPAR 
CALL -IBl 

[Z 



Type: 



943D:EA EA EA 



Type: 
BSAVE TPAR, AS948«, LS69D 

I 11 



Enjoy the game! 



Controller 



1000 REM TRANSYLVANiA 

I010TK = 3 LT = 35 ST ^ 15 :LS ^ 15 .CD = WR 

:FAS: = I 
1020 GOSJB 490 :T1 =TK ;LT = TK- 1 , RESTORE 

, GOSUB 170 . GOSdE2000 
1025 GOSUB 610 iFPEEK (BuF ) <HBANOLT<> 

35 THEN LT = LT + 1 -JK = TK - 1 GOSi^'B 
1030 GOSliB 230 TK = Tl :LT = 35 : GOSUB 490 : 

GOSJB 610 . iF PEEK (TRK ) = LT THEN 1050 
1040 TK = PEEK ;TRK ) :ST = PEEK (SCT ,i . GO'^O 

1020 
1050 HOME : PfilN' "COPrDONE" : END 
2900 POKE 47445 212 + (TK ' 2 = i ffT (TK / 2 ) ) 

RETURN 
5000 DATA 218 .170 ,218 .170 
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Controller Checksums 



1000 - I356S 

1010 - $2445 

1020 - SFFCl 

1625 - $CA14 

1030 - $83A3 



1040 - SFEC9 

1050 - SF4DE 

2030 - S133E 

5000 - S93BS 

- $0300 



Siiftkey for. 



Beyond Castle Wolfenstein 

M 11 sc 



\jk J INlTializc a blank disk using the 

tianiL- HF.LLC) 



liiMall ihc controller listed below 
into Super lOB and ctipy the original to the 
ini[liiii/ed AxsV. 



Put the copy you ju.st made into 
your dri\ l' 

I ^ I Type the following; 

FP 

le HOME : DS = CHRS (4) 
2fl PRINT DS ''BRUN gINIT" 
SAVE HELLO 

Controller 

1000 REM BEYOND CASTLE WOLFENSTEIN 
1010TK = 3 .LT = 35 ST=15:LS=15 CD = WR 
:FAST = 1 

1029 RESTORE GOSUB 190 GOSue 210 POKE 
47426 24 POKE477S6.35 GDSJB 490 ; 
GOS'^^B 510 

1030 GOSUB 230 ^OKE 47426 56 ■ POKE 47786 
. 170 , GOSUS 493 : GOSUB 610 IF PEEK 
(TRK ; = LT THEN 1050 

1040 TK = PEE>< (^RK ; ST = PEEK (SCT ) : GOTO 

1020 
1050 HOME PRrJT "COPV'DONE" END 
5000 DATA 213 .216 150 .213 ,218 .173 

Controlkr Checksums 

1000 - $356B 1040 - SE635 

1010 - S2445 1050 - S7412 

1920 - JF6C6 5000 - S0631 

1030 - S7FBB - S00O0 



Softkey fitr. 



Pieman 

Penguin Software 



l\e the L on (roller for Sword of Kadash in 
COMPUTIST 11 . When prompted, press "F" 



to run the controller (for (he fron( side of Swtmt 
of Kndash ) . 

.VIos( of these softkeys were found by me 
trying the softkeys m COMPUTIST on other 
softwaic by (he same companies, and making 
minor. 11 etri) , ntoditleations to ihcni. 

If you haven't already tried it, log onto (he 
Cutting Edge BBS ai (313) 349-2954 for bonie 
additional deprotecdon (ips. 

One last (hing. I am sure there are alut of 
us out there that this maga/.mc has helped nut. 
No\\ let us help out (he magazine. If you're 
reading someone else's copy , then subscribe to 
i[. and if you already subscribe to (t. get 
.someone else to subseiibc. 1 am sure none of 
us want this niagazinc (o t'old up. So. let's ge( 
out there and really suppon i( any way w^e can. 



Steve Marvin 



Softkey for. , 



Hacker II: 



The Do<ymsda\ Papen 
Activjsiiin 



Run COPYA or any fas( sec(or copier and 
the copy APPHAHS to work normally, until you 
try to enter a logon ID. Then i( does sOEtie disk 
access followed by a cra.sh. The "■HELLO" tile 
HACKER 11 HI- I'.LO (Binary type) checks the 
di.sk for a sequence ot' nibbles iSigtiature} that 
begins with a normal nibble SEB and ends with 
a self sync nibble SEE . .^fter nibble examination 
of the disk, irack by track. I found this sequence 
on track only, immediately following one data 
sector: 

DE AA EB FB inonnal,! 
BF FD BB FB EF iself sync) 

After the signature cheek, which is located 
at S63C9 (The file ■■BRLNS" at SWXWl, the 
resul( is placed in locadon S6435 and the code 
exits \\ith a CI.C RFS. 1 discovered by placing 
a short intercept routine in die ctxle dial the byte 
should be 555 for my versitin. 

Near the end of the protection code \oull 
sec: 

S6405: B0 8CCS LOACOSC.X 



S6408 10 FB 


BPL 6405 


S640A 38 


SEC 


S640B 2A 


ROL 


i640C 25 FC 


AND SFC 


fiiff vtiks (1 reatix 




$549E. 49 AA 


EOR tS.AA 


Sili'f i! fir rht-a hiler 





S6410. 80 35 64 STA S6435 

Change S64I0 (o jump to the intercept routine 
at S2l)fi, which will save the .Accumulator, 
read-enable the motherboard ROMs, turn off 
the disk drive and enter the nionitor. The value 
we want is in the Accumulator: 

6410:4C D) 1)2 
2D*:8D DC 82 
2D3:aD 82 CB 
2D6:9D 83 C0 
2D9:4C 59 FF 
2DC:SI> 
SSBBOG 

The paith is as follows: (Use the by[e you 
found above) 

BLOAD HACKEH II HELLO. AjSOII) 

CAlL-151 

6435:55 

G4(IE:A9 55 

BSAVE HACKER II HELLO,A$60aO.LS589 

You can replace (he D(3S wi(h a Fast DOS, 
but after the initial load of files 
■■BL0AD'BRI:N DOS.D5WV ends up at 
SD50O in bank 1 of the upper l&K and it 
replaces DOS for all other file access during 
the game. Happy Hacking 1 



Scuzzy Port 



Deprotection for Apple IIGS 

.Although the tollowing deprotection schemes 
are not very infornialive, they are nevertheless 
very effective. 

Copy the 3.5" disk and ignore the bad bliicks 
(le; "protection"). It's usually block $7 [h;n is 
bad. Then, using a sector editor, make the 
following changes: 



llGS Softkey for. 



PaM works Plus 1.0. t.01 

.Activist! 1(1 



Search the disk lor: C9 W) tW D0 111 and 
replace these five b>tes with: EA's. 
CJn version l.B, it's in block %2^\ . 
On version 1,01, its in block $48. 
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IIGS Softkey for.. 



Musk Studio 

Aciivisioii 



Change byte S 14 in block $44D from F0 to 
80. (If it's not Iherc, sourch for 0C 00 C9 01 



Bfock 6y;e From 



1440 14 



To 



80 



llGS Softkey for. . 



Shanghai 

Aciivision 



Change: 

Block Byte Froit; 
$243 SEl 



To 



F0 



8S 



Joaquin Berrios 



Softkey for. . . 



Bard's Tale II 

Electronic Arts 



■ Rei|uiremef)ts: 

D Bartl A Tale If 

D Apple 11 series eompuicr 

G Super lOB vl,5 

D Kour blank disk sides 

It _\ou ean eopy a disk by a certain company. 
and you ha\E! another made by the same 
company, try the method you used on the first 
disk before anything else. 

Thi.s proved to be the ease with Electronic 
Arts' new release Bard's Talc II CFlic Destiny 
Kni^hlj. After carefully loook'ing at the Copy 
[I Plus par III for Bard's Tt.ilc. i set out to write 
a Miftkcy to deprotect the new Bard 's Tale II. 
I was surprised to see that the iiielhod i)f 
protection had not changed. .All that was needed 
to do wa.s skip track .S6 and a few other sector 
edits to by -pass the protection routine. 



listed at the end of this softkey 



Install the Super lOB controller 



L_? 1 Copy the disk saying "ye.s" to the 

formal option 



The controller will make all the 



neecesarv sector edits 



_ Copy the other sides with COPYA 



(jr a last copier 

1 1 You now have a deprotected 

version of Banl's Tale III 



A Little Help 

I also figured out whai "The Dreamspcll" 
spell code is: ZZGO. Also )ou can get more 
money than you will ever need by doing a 
simple sector edit. The bank accounts are stored 
in track St, sector SI of the character disk. The 
first four bytes contain the account number, 
which can be seen in [he lext with a sector 
editor, while the amount of gold is stored after 
it in a digit by digit format, lor example. 567S2 
gold would be stored as %V)5 S06 S07 $08 S02. 
You can change the amount of money in your 
account by changing these bytes with a sector 
editor Putting a S09 after the account number 
will give you all the gold you will ever need. 



Controller 



100BREM BARD'S TALE tl CONTROLLER 

I010ST = 15 :LS= 15 :FflST= 1 ■CD = WR 

1020'K = .LT = 5 GOSUB1050 

1030 'i^ = 7 ;LT=35 . GCSLB1250 

1040 HOMF . PRINT "COPY'DONE " END 

1050 GOSUB 490 : GOSUB610 

1060 Tl = TK .TK = PEEK (TRK ) - 1 RESTCRE 

GOSUB 310 TK = T1 
1070 GOSUB 490 : GOSUB 510 fP PEEK (TRK j = 

IT THEN RETUR^J 



October 



1080 TK = PEER (TRK i : ST = PEEK 


(SCT ) . GOTO 


1050 






3000 DATA 4'CHANGES 




3010 DATA : , 


6 .8 98 




3023 DATA U 


.7 117 .234 




3030 DATA 14 


,7 118 ,234 




3040 DATA 14 


,7 119 234 




Controller Checksums 


1000 


- (355B 1070 


- 1547D 


1010 


- tl6BA 1080 


- SAD4D 


1020 


iB2l: 3003 


- SBE4i 


1030 


t5DCa 3013 


- SE8CF 


1040 - 


$D703 3020 


- S35E6 


1050 


$3601 3030 


- IE707 


1050 - 


J2FDF 3040 


- $1304 
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If you know how to 

deprotect. unlock, (»r modify 

any of the programs listed below, 

let us print jour know-how in the 
Reiicicrs Dutu Ei,xL-hanjze, 

Just send the information to us in a letter to the 
RDEX editor preterabiy on a DOS 3.3 diskette. 



MOST 

WANTED 

LIST 



Visihiemt Microlab 

Gtitenburg Jr. & Sr. Micromation LTD 

Prime Plotter Primesoft Corp. 

Ilie Handlers Silicon Valley Systems 

Fun Bunch Unicorn 

Willy Byre ... Data Trek 

Snaggle Broderbund 

.4BM Muse 

Agent i'.S.A. Scholastic 

Handicapping System Sports Judge 

Odiis Odesta 

Brail! Bank The Obsevjlery 

Cr\pt of Media Sir Tech 

77if Wnrks First Star Software 

Cross Clues Science Research 

Pcepin.i^ Torn MieroiaLi 

Jigsan Microltiri 

.Miner 2049er II Vlicrofun 

Create with Garfield DL.Vt 

Print .Master Unision World 

Bandits Sirius Software 

Bank Street Filer Broderbimd 

Operation Frog Sehoiastic Software 

IVtiri^ Force // Core Concepts 

Super Boulder Das It Electronic Arts 

Zorro Datasoft 

Gounies Datasoft 

Kitchen '.\ Game Maker Activision 
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Hardware Corner 



A Real-time 



by Bobby 



It'i liui early 1o lell liow many ol" you are 
interested in hardware No letters have reached 
me vet. If you want more, please write; you 
hold the life of this column in your pens. 

I'm going to assume thai ai least one of you 
IS interiisted and write another column. 

First. I have a ',ut;geitcd blunge to the 
schematic lor the interrupt card. "!he resistor 
connecting PB7 to PB6 should be deleted and 
the circuit in figure 1 used instead. This way 
the AND gate will allow either PB7 or the 
e.\ternal input la jumper to OK on the video 
ROM, I hope) to clock PB6. 

I have an Apple lie with only four cards 
(extended 8H column, t4K printer buffer, hard 
disk controller and floppy disk controller). 
Recently it began clearing memory" at <xld 
intervals and in conjunction with a disk access. 
I'd seen this problem belbrc; the wimpy Apple 
power supply ain't haeking it. My power supply 
was getting old too fast and couldn't put out 
enough current to satisfy my peripheral cards 
and the disk drive together. Removing any one 
t;ard cleared the problem, so I knew the power 
supply wasn't completely had, just marginal. 
"Where could I gel sotne extra miliiamps"' 

Well, I could plunk down $35 for a new 
after-market power .supply from JAMF.CC) 
Electronics. That would give nie 2500 extra 
miliiamps. Hut I only needed a few, so 1 decided 
to "finess it". Hardware hackers probably 
already know about CMO,S t Complimentary 
Metal Oxide Semiconductor) chips and about 
the new 74HCTxx scries {a direct replacement 
for 74LSxx) used in the Apple. But do the rest 
of you know that not only is it a direct 
replacement but tlie HCT chips draw only 
microamps of current instead of miliiamps. 
Here was a way to get that extra current and 
still be able to take in a movie tonight. 

Pop open the top of your fie and check inside. 
(Turn off the power rirsl!) We're looking tor 
socketed 74LSxx chips the we can replace 
without soldering. Let's see now. there's a 
74LS245, a 74LS138. a 74S1S9 and a 74Slfl 
on the motherboard. {Some idiot soldered all 
the other 74LS\x chips.) Then there's a 
74LS24.'i and a 74LS374 on the extended m 
column card OKI Close it up. 



The 74Sxx chips draw a lot of current but 
they are also very very fast, twi fast for HCT 
so we leave them alone. The 74LS138 only 
draws 10 miliiamps so let's leave it alone too. 
But the 74LS24.S (US niillianips) and the 
74LS374 l45 miliiamps) are ideal for our 
purpose. Together (in a worse case) they draw 
a current of 215 miliiamps. To get the right 
perspective, you need to read the ,\pple He 
reference manual (page 172) where it says 
"-(-5-volt p<iwer supply. A total of 508ma is 
available for ull accessory cards." Only 5M 
miliiamps for all of your power hungry cards 
in all your slots. Pretty lean diet. But uc may 
be able to get up to 215 more miliiamps just 
b\ replacing diree chips. It's wonh a try. 

JAMECO Electronies lists the 74HCT245 
and the 74HCT374 at SI . 19 each. That comes 
to 53.57 (two 74HCT245 and one 74HCr374j, 
The minimum order is $20 so I also ordered 
a few other chips thai 1 needed, 

1 swapped the chips and so far, it works 
perfectly. The old power supply can still put 
ii out with a litde help from HCT. 

Before anyone decides to replace all the chips 
in their computer, let me cautions you. HCT 
is listed as a direct replaeemcnt for LSTTL 
chips but ihere are some differences. HCT is 
marginally slower dian LS and some chips have 
a reduced drive capability, 

if you replace LS with HCT, it won't always 
work. You need to look at the timins and the 
loading of each individual chip and even then 
there is some confusion. For example. The 
74LS1,"'N (on the motherboard) drives the I/O 
Select ($CnXX) lines to the peripheral slots. 
The reference manual sUites that each l.'O Select 
line will drive IM LSTTL inputs. That means 
it will sink 4 miliiamps of current for each slot 
or a total of 32 miliiamps t worst easel. The 
74HC"n38 is specified at only 8 miliiamps 
output drive. Thai seetns to leave it out. 
However, it's highly unlikely that each 
accessory card will use the maximum drive of 
10 LSTTL loads. So the verdict is it will 
probably work on most of our Apples anyway. 
but I wouldn't use it on my Apple. 

Also, if you have any of the oversize RAM 
boards that everyone seems to be selling now, 
215 miliiamps is just a drop in the bucket. You 
need a bigger power supply with tour or even 
seven amps of current on the *5V line. That's 
4(W0 or 7000 miliiamps, .Sorry. 1 don't have 
any reliability data on these power supplies 
since I haven't had to buy one. If anyone has 
experience, how about letting me know and I'll 
pass it along. 



Activity Monitor 

Now let's do something fUn and nifty. I've 
got a simple circuit that everyone can build, 1 
wanted a display of what addresses a program 
was accessing and where the program resided. 
1 didn't warn to stop the program so the display 
uouid also have to be m real time. Obviously 
the bus monitor circuit published previously 
u ith its hexadecimal displays would not work. 
A real-time display with hexadecimal readouts 
would be a blur. Besides, hexadecimal readouLs 
cost to much, I like dirt cheap projects that don't 
use up my movie money. So 1 thought about 
it and came up with the circuit in ligure 2. 

The upper 4 bits of the address bus (A32, 
A13, A14 and A15) define 16 blocks of 4K 
each. This works oui very neatly. 



A15 


A14 


Ai3 


A12 


dltJCK 


adcress range 




1 


1 


1 


F 


iF300-F-FF 




1 


1 





E 


IE000-EFFF 




1 





1 


D 


SDM0-DFFF 




1 








C 


JC009-C=FF 







1 


1 


B 


Se000-BFFF 







1 





A 


SA0O0-AFFF 







3 


1 


9 


S9SG0-9FFF 













8 


S8000-3FFF 





; 


1 


1 


7 


S70O0-7FFF 





1 


I 





6 


S60O3-6FFF 





1 





1 


5 


S50O3-3FFF 





I 








4 


S40O3-4FFF 








1 


I 


3 


S3eO0-3FFF 





a 


1 


a 


2 


S2Ofl0-2FFF 











1 


1 


S100a-1FFF 














a 


S009e-aFFF 



Block contains the zero page (SfflWWlCFF). 
the stack ($OHKI-01FFi. the input buffer 
( $0200-02 FF), text page 1 (SO40O-e7FF) and 
text page 2 (S080O-0FFF). Also, BASIC 
programs usually load starting at $0800. 

Block 2 and 3 are hi-res page 1 (S2M0-3FEF) 

Block 4 and 5 arc hi-res page 2 
($4000-5 FEE). 

DOS ,L3 starts in block 9 and uses block A 
and B (S960O-BFFFV 

Blwk C is primarily used for I/O. The soft 
switches and on-board I/O are from SCOtW- 
C07F, The 16 byte 1/0 space for each slot use 
SCO8O-C0FF, The peripheral ROM space from 
$C100-C7FF is broken into 7 pages with each 
slot getting its own page. That leaves SC800- 
CFEF for the expansion ROM that each slot can 
use. The Apple He can disable 1/0 decoding 
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Activity Monitor 



in [he SC'lWCI-Cf-FF range lo allow aceess to 
the CD ROM rauiines. 

Applesoft in ROM (SDOtX^nFF) uses blix.-k 
D, H and part of F. 

The Apple inonilur (SF800-FFFF) resides in 
the upper half of block F. 

The other blocks are not assigned lo any one 
panitJuUr funelion. 

You've probably noticed that some blocks are 
a bit cramped and yes. a neat tbllow-up project 
would be to decode block and block C. 

How it works 

The 4 upper address lines (bits A12-A15) arc 
connected to input lines A thru D on the 
74HCI54 decoder. 

These inpuis select 1 of 16 outputs. The 
selected output goes low , all other outputs are 
high. Gl and G2 are enable inputs and are tied 
to ground. The decoder outputs are connected 
to LEDs (Light Emitting DiL>dci.j. .\l\ of the 
LEDs arc connected, through a resistor, to the 
+ 5 volt supply. When nu) output (or the 
74HC1541 goes low, the corresponding LED 
will glow. 

The resistor limits the current flowing thru 
the LEDs. Only one resistor is needed for all 
of the LEDs since only one will be on at any 
given moment. 

Bui here's the nitty part, since the LEDs will 
t>c turning on and offal a very high rate, more 
than one will seem to he on at the same time 
indicating where the processor is accessing. 
And the intensity of each individual Ll-i[> will 
indicate how much time is being spent in each 
block. The brighter LEDs are where the 
program resides and the dimmer LEDs are 
where ihe program is reading or writing. Nitty 
and all in reaJ time. 

The 74HCT373 transparent hitch bulfers the 
address lines (The 74HC154 input levels are not 
fully compatabic with the Apple hus signals) 
and alh)ws a special option. 

On a ile, pin 3^ of each peripheral sls)t is 
connected to the inicroproces.sor sync output 
I pin 7). Don't confuse this with tlse video sync. 
They are not the same. 

The microprocessor .syne is high during the 
first cycle of an opcode letch Tfiat means the 
.wnc is high only when the processor is reading 
the ne.u program instruction. When we use this 
line to enable the latch, the LED,s will only glow 
on those blocks where the program resides. 

On a 11 and 11 » the microprocessor sync line 
is not connected to anything. 

The more adventurous reader can loosen the 
6502. bend pin 7 outward, then connect a 



jumper from pin 7 to the display card. If you 
do this, don't forget to cut the connection to 
pin 39 of the slot. 

Somt Possible Problems 

If you have a card that does DMAs (Direct 
Memory Access) the display will be erroneous 



while the card doing the DMAs is active. 
Accelerator cards will really give .some wrong 
indications since the programs arc running in 
the accelerator memory which is not reflected 
on the apple bus. 

I'll put the circuit board layout lor the 
interrupt card in the next issue. That's all for 
now. Oh yes, don't forget to write. 



VIA 



PBT 
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A Hackers Challenge 

awaits those who enjoy "breaking'' prutuctiun iichtmei^ for fun. 

Knowledgeable with DOS 3.3 
and associated utilities? 

If so, this game is for you. Includes graphics routines 
from The Graphics Magician® by Polarware'". 

Inside, protected by layers of graphical puzzles and 
DOS-tricks hides a secret. Being among the 1st ten 
to discover the game secret wins you a computer- 
game prize! What are these prizes? I'm not saying, 
yet all the clues you need to win along with the prize- 
list are concealed in the game. 

Find the clues by playing the game. 

Find the clues by using your favorite utilities. 

To answer this challenge send $10.00 to; 

Mark V. Whitehurst 

PO Box 485 

Franklin Park, IL 60131 

Requires AFFLli lie or lie. 






APPLE COMPATIBLES 

LOWEST PRICES 

ANYWHERE! 



1 



IMEGJ«lC0LBD*'ffi6K*S(lfr*arB(llel S99 
IMEG HAW BD for IIGS w;256S39 

64K;«) CDL BO Kew Lower Power (ikr E35 
ISK BAM BoarOilr*' S35 

I^K RAM BD Net, latar Power ilk S6S 
80 'Column Boarij VirtES Comp (ll+i %A^ 

Super Serial Boarr] ■;iI+/e? $49 

Craptiic Pa'BD W6H CDL ill+.e'BSj ..Ui 
«:- CP I'M BD Micros nrr Co rDp i*rEj(5) $19 
Crjoling fap A^surge p^ijtecl (lk.'ei EZ9 

G& 5l.per C00M09 Fan ihgsl S35 

•JjrrieriL KBvpad 16 Keys (IKi ... . $35 

joy5tii:k iSpecitv il+/ci^e'gsl J15 

joysTn:k w/Fire on s^ch i+rc'c^gs) $25 
Mini vacuuTi Clearer w/ArtacfirTierDs $10 
A.BSwni:nboi Psralltl O' !t3-?3f S;9 

Disk drive M H(5Beorjlki.e.'9SJ S1?9 
Dm Cnnrroller Boari] ill+ie'gsi . . ..539 
Eprom Pfogrflmm«r III* 'ergs .1 S49 



. 'EtfWMRSNllONALlPHDOUtlS 
CALL/WRITE FOB COMPLETE LIST 

AOO S3 SHIPPltlG IP'ir OHSfH niil (ipr iliml 



NEXO DISTRIBUTION 

914 last Blti Streit. Siiiti 109 
Nitional City. » 92050 
[6191 474-3328 
lOnn-Opm Mon-Frl 



JNIV A SCHOOL P.O.'tWELCOMEl 
' VISA/MC OKAY-CO.!!. KOD 12.00 ' 



TRAC CARD 




Boot Process Memory Card 

+0n- Board Memory Slores Up To 200 Disks 0' Atixtssed Tracks White Powerd Up 
+AII Disks Are Automatically Monitored From The Momerit You Power Up. The 

Trai:ks Are Divided ln[o G-roufs 01 "Booied" Disks 
+Save Time When Using Backup SoltwareThe Tracks Accessed May Be Displayed 

In Numerical Order Or In The Order tn V/hiCh They Are Read 
+TRAC CARD G ves You Maximurn Accuracy For Backing Up Software By Precisely 

Slorirg 1/4. 1/2 and 3/4 Tracks, As Well As Full Tracks 
+You May Choose 40 or eo Column On Monitor Or Dump Data To Printer. Name 

Each Disk When Pnniing Track List 
tChoose Either Decimal Or Hexidecimal Readout 
tUse In Any Slot, Including Slot #3 On lie 
+ Worlds With Any Apple Compatible 5 1M" Drive 
+Works With Apple II, 11+ and lie, As Well As Compatibles 



Price 5159,95 Plus 13.00 Ship^ng & Handling 



Personal cnecKs, M O 
Visa and ^/lastercofCJ 

Phone 913 676-7242 



IRAK STAR 




Constant Digital Readout of Disk 
Drive Head Position 

-fWorks With Any 5 1.'4" Apple Coirpalible Drive 

■i-Saves Copying Time Wii.h Nibble Programs 

+Copy Only Tracks That Are Displayed 

+If Coped Program Doesn't Run, TRAK STAR Displays Track To Be Recopiad ' 

4Displays Full and Half Tracks 

+Opcrates Will Any Apple Compatible Program, Including Protected Software 

+Disp'ays Up To 99 Tracks and Half Tracks; Compatible With Hign Density Dnves 

■fDobs Not Use A Slot in the Apple 

-i-For Apple II, 11+ ard Hb 

+Simple One Mmuie lns;ai'alion 

Pnce $99.95 Plus $3.00 Sh pp.ng S, Handling 
Adaptor Cable Required For 2 Dnve System $1 2. CO 
OuoOdisk, 5 t/4" Unidisk and lie Owners Please V/rile 



AP01& li a fQgijTe-ea rrodorr^iQ 

Midwest 



■■ Appe CompLtej ir.c 



/Vl^^. 



Microsystems 



10308 Metcalf, Suite 355 
Overland Park KS 66212 



the COMPUTIST shopper 



Animate S43 .00 

Award Maker S23,75 

Bank Street Writer + (I28K)... S46.75 

Blat-k Cauldron 525.00 

Certificate Maker $2K.m 

Copy 11+ $23. (W 

F15 Strike [;nglc %2} IW 

Flight Simulator 11 $3?.0fl 

GPLE S29.5H 

Gameruaker J32.00 

Hacker 11 $25.00 

Hacker I] (GS) . 530,00 

Hitchhiker Guide S20.1W 

Karateka 522.00 

Knight Of Diamonds $25 .00 



Legacy ol Llylgamyn $25.00 

Lode Runner'. ....', $22.00 

Magic Mintli>M II $HH.m 

Majjic WiiidoM //e S88.»» 

Math H!astcr S27.t» 

Math Rabbit ....,., S25.00 

Might & Magic .,,.,.,.. 532.00 

Multlplaii ... . . S62M 

.Music .Studio (G.S) $52. W) 

Newsroom 535.00 

PatntworLs - (GS) 552.00 

Prinlshop. $32.99 

Print.shop Cnmpanion $26.09 

Reader Rabbit 525.00 

Reader Rabbit (GS) 532 (M 



Roeky's Booth S32.00 

Sargon II] $25.00 

Silent Service S23.m 

Summer Games II 525.00 

Super MacrOHorks S29.58 

Where in the USA Carmen San Diego. 526.50 
Where in the World Carmen San Diego S30.00 

Wizardry S32.O0 

Word FiTfttl w/ Spelling Checker $95. M 

WordPerfect (GS) 595.00 

World Games $25.00 

Writer Rabbit S25.00 

Writers Choice Elite (GS) .560.00 

Zork I S25.0O 

Zork Trilogy S45.00 



Name 



_iii*_ 



Stale 



Zip 



Phone 



• CS orders: Circle your .selection. 
If total order is less than S200. please add S2 per item 

shipping & handling. Orders over S2l)() receive free 
shipping. Most orders shipped LPS. so use street address. 

• In Washington state, please add 7.8% sales tax. 

• Offer good while supplies last. All products are for the 
Apple II unless otherwise specified, 

• Foreign Orders: Please inquire as to appropriate shipping 
lees. 

Sc-nd onicrs lo: Softkey Publishinj; PO Box 110816-T Taciima, WA 98411 (206) 474-5750 



.Address _ 

City 

Country . 

SiKnature 



_E\(). 



CP48 



Legends tell of the ilavs when the ancient back issues (if Hardcore COMPl TIST «ere readih available to anione who wished to purchase them. Those dajs may be long 
since past, but the information contained in these ancienl documents has been dilij;entl> transcribed to the paj^es of a nn)dern reference work: 

The Book of Softkeys 



Volume I: Compiletl from issues 1-5 

caiitiiiu siiftktvs fur: .^kiilatxth •,^in[>ernug:c 'Apple GiilaiLuii •Azta: 'Bag of 'tricks •Bill Bujjies 
Triliigy •Bu«iirJ Bail •Caimttnhjll Bliu "CiMra' •Dasa Rcpmer •EX-adlinc •DiskOrgaHBer II •Rghen 
[I L'iimmuniLiaucins Disk •Hard Ha; Ma^i^ •lluirk" ,\n.MLjriijri[ 'HMinc^^ind •ljru.-aylc;r "Magu: Wirxio* 
It *MuUi-d]sk Latalijg "Mulliplan 'PeM I'atro] •l'ni..in(rr 11 "Sammv Lighlfool 'ScreEn Writer II 
•Silcakcf^ 'Sfiy's DemiiC •SlariTiito •SuspenJed •Ultima U •Viiji'ile •VjsipiiJI 'Visiirend •Wimeis 
•Wi/ardr>' 'Zork 1 •Airk II •Zurk III 'PMS hiiw-tn iirlnlcs ami prDgmni lislings nt need-lD-havi: 
progrEim.^ Uicd ti* make uripmrcLtcd backups 

Volumt II: Compiled from issues 6-10 

conlaiiu suftkevi fur: .Appk- CiJci SpiJci 'Apple Lugo ".^iLade Madiirie •The .Aitisl 'Bank Streei 
Wriier •Cantiuiitiall Blii/ •Canjun fiimber •Casi^rns nt rrpiug •Crush. Cnimhlt A Thump •DiiM 
Factory 5.0 •DB Ma.sitr ■ the I)iL-"iiim*arv -Kisemal Data Duplicator I & 111 '(jcild Rush 'Krcll 
Lsgo •Legacs of Ll>lgatn>n •Mask Oi the SiiCi •Mjnil Man •Msju.skaiuck 'Music t'onstrucuon Sei 
•Oil's Well •Pandura's Bin •Ri>huiti>ii •Saiiuny I ighiF.pol *Si.recii« titer II \i2.2 "Si-nsiWc S|.>ellei 
■to, 4.0c. 4 II- "the Spy Strikes Baek •tin'.e /one vl .1 • Visible Compuicr: (>5t)2 •Visidex •Vi*iii-rm 
♦jtaxxon •Hj>den So[t^^arI: •Sierra Online Soltware •ft.LS [tie coniplcic listtng of the ulrimale 
eraeking prifgratti.. SuptT lOB I ."i ••and mure' 

Volume HI: Compiled from issues 11-15 

tunlAirts suflktys fur;Ahen Addilion •,Mien Munctiie-s •jVUigaior Mix *Computcr Hreparation S.A't 
•Cut And Paste •Demolition Dtvi.sitJn •Dt.M tOevehipemtnt I.earnmg .VlattfriyEs} soitwurv •EA 
([;]ct;tri)ni^ Ansj softwate •Eiuslein Compiler tcrsuui ^ .t "Eseape From ftungisian ■FinaiiL'ia] 
Cooktwok 'Flip Out 'Hi-kes Compiiler GntI II •Knowiirc •Ljf I'ak 'Ljist Gladiator •Lc.arninf; With 
Leeper •Lion's Share •Master Type v'1.7 •MatheNtagie •Minu.s Mt.ssitin 'Millionaire •Musse 
Construction .Set 'One fta One 'PFS ^ol"ll^a^e 'PS 1 Penguin j Se-ftMare •The Quest •Rocky 's BlwIs 
•SihoEagc ".Seadragon •Scnsihlc Speller IV *SniMT[ler Troops II •Sot'tPorn Adventure •Slickyhcar series 
•Suicide •TcllStar •Tic Tac Show •Time Is Money •TrjiisvKania •T'y|X; Ailack •lliiiitia 1)1 Fx<h1us 
•Zoom Graphics •Breaking L.titJtsm]lh iS} Fail Copy "PLL'S feature articles on •Csaver 'The Core 
Disk Searcher •Modified ROMs 



To order: The Book oC SoUkevs 



D Volume I - $7.95 + $2 Nhipping/handlinu 
n Volume II - $12.95 + $2 Khippins/handlinfi 
Z^i Volume 111 - $17,95 -I- $2 shipplnK.'handllns 

n All three volumes! - $30.00 + $2 shiphandiinK 



Name 

Address. 
City _ 
Ciiuntry 



.Si(j nature. 



_IIW. 



State 



Zip 



_ Phone. 



Exp. 



jcvm 



Foreign orders (except Canada and Mcsico) please add S5 fnr 
shipping and handling. \V'a.shin^lon residents add 7.8^ sales tax. 
Mo,st order? are shipped within 5 working days, houcvcr, please 
alk™ 4-6 weeks delivery US funds drawn on L'S banks only. 
Send to: 



Book of Softkevs 



PO ««x llltS46-l 
(206) 474-S 



Tacoma, W.A 9S4] 1 



COWIPUXISX 



Features: Inteicotn lexl Reader 
Enhancement •Color Ulhrruppcr mod to 
Ultimapper IV •Towne Mapper utility fjr 
Ultima IV "Dungeon Mapper utility for Bard's 
Tale "Hardware Corner: Interrupting Your 
Apple "Softkey (or Charlie Brown's 1.3,3s • 
RDEX Sofitwys: "Guitar Wizard "Gems I one 
Warrior "Notable Phantom "Micro Wine 
Companion •itickybear Printer "Note Card 
Maker "Starcross "Wishbringer "Dinosaur Dig 
"Dam Busters "Pirate Adventure "Infiltrator 
"MECC software "Banner Catch "Turtle Tracks 
"PFS l-ile "Microiine ^ I 2, S I i, ?< I 4 "Marble 
Madness "Writer Rabbit "Aretictox "Age Of 
Adventure "Might And Magic "Space Station 
•Alternate Reality 'Mindshadow 'Gemslone 
W'arrior "Strip Poker 'Lucifer's Realm 
•Manuscript Manager "Bank Street Writer III 
"Kids On Keys "The Missing Ring "Graphic 
Solution "tmpire 1. II "Chanipionship Golf 



Softkc\-.\ 'Advanced Microsystems 
Technology programs "Word Attack "Star 
Blazer "Science Toolkit "The Color Enhanced 
Print Shop "Video Vegas "The Handlers "feC. 
Deals On Wheels "Law Of The West 'Break 
The Bank Black|ack "Foundation Course In 
Spanish "OGRE "Puzzles And Posters 
'Feaiures "The Shift Key Lower Case Option 
For 11+ "Amazing Computer Facts "Shape 
Magic utility Preview: Multiscribe 



Sofikfx.^ "Mouse Calf "Sands of 
Egypt "Number Farm "Agent U.S. A, "Wavy 
Navy "Kinderconip "Flight Simulator Update 
•Raid over Moscow "Crime Stopper "Key 
Perfect 5, "The Final Conflict "Miss Mouse 
•Snoggle ^Feanties "Write Protecting the 
Microsoft RAM Card "Keys to Success on the 
Franklin Ace 'Modified FS ROMs on the Apple 
/,',' *Core 'Owner's Review ol Copy Master II 



Softkey :i 'Arcade fkiot Camp 
•Goonies "Zorro "Coveted Mirror "Crimson 
Crown "Compubridge "Fleet System 3 
•Microwave "Escape "Catalyst 3.0 "Number 
Farm "Alphabet Circus "Joe Theisman's Pro 
Football "Black Cauldron "Intern, Gran Prix 
^Features 'Making DOSIess Utilities "Pixit 
Printer Drivers *Reuew: Z-RAM Memory 
Expansion Board "Reading the Joystick. , 



SoftkcM 'Graphics Expander 
•Information Master •Certificate Maker •Elite 
•Catalyst 1.0 and 3.0 'Murder On The 
Mississippi 'Temple Of .Apshai Trilogy 'Troll 
Associates programs 'Spell It "Regatta "Cdex 
Training programs "Think Fast 'Faitiirc.s 
"How to Write-Protect vour Slot Zero 
"Capturing Locksmith 6.0 Fast Copy 
"Revisiting DOS to ProDOS and Rack 'Core 
"Computer Eyes ■ 2: a Review *APT\ 'Sword 
of Kadash S Rescue Raiders "Ultinisker IV 



Sofikcwi 'Light Simulator "Beach- 
Head "Monty Plays Scrabble "Racter 'Winnie 
the Poob "Inlocom Stuff, Kabul Spy. Prisoner 
II 'Wizardry I g 3 "Lucifer's Realm "The PFS 
Series "Dollars and Sense "Strip Poker 
"Coveted ,Mirror "Wizard's Crown 'The 
Swordthrust Senes 'Axis Assassin 'Manuscript 
Manager 'The Crown ot Arthain 'Address 
Book •Decimals 3 "Dragontire *Fi'auiri's 
',^uto Duel Editor 'Wizard's Crown Editor 
'Quest ron Mapper *Carf "The Games of 
I i>S6 in Review 'Atlvt-iiiuff Tip': "Ultima IV 



^M 1 Softkfys 'The Periodic Table 
'Gemstone Warrior 'Inferno 'Frogger "Story 
Maker 'Adventure Writer •Mummy's Curse 
'ZaxT^on 'The Quest •Pitfall II •HERO, 
'Fculuni •A Two-Drive Patch for Winter 
Games "Customizing the Speed of a Duodisk 
"Roll the Presses Part Two Pnntshop Printer 
Drivers "The Games of [9SP, 



40 



Softkevs 'Adventure Writer 'E-Z 
Learner 'Mychess II 'Raster Blaster 'Cranston 
Manor "Ghostbusters "Designer's Pencil 'The 
American Challenge 'Encyclopedia Britannica 
Programs "Crime Wave Fcaiu/vi "Taking the 
Wit out ot Wizardry "Adding a Printer Card 
Driver to Newsroom "Gwr Games ot 1986 



Soft keys 'MIDI,' 8+ 'Homeword 
\2.\ 'Borrowed Time 'Amazon •Speed Reader 
J[ •Discovery! "M-ss-ng L-nks series 'Donald 
Ducks s Playground 'Mastering the SAT 
•Copy ][ Plus 4,4C '.Masterof the Lamps 'One 
on One 'Bridge Baron •A,E. 'Great ,Ameriean 
Cross-Country Road Race "Computer 
Preparation for the SAT "Castle W'olfenstein 
"Luscher Profile "Skyfox "Silent Service "Echo 
Plus "Swashbuckler "Kandamn 'FeuUin-s 
"Electronic Disk Drive Swapper "Abusing the 
Epilogues "Print Shop Companion's Driver 
Game 'Core 'Keyboard Repair "Fixing the 
Applesoft Sample Disk 



Sfiflkcv^i 'Cyclod •Alternate 
Realty 'Boulder Dash I £ II 'Hard Hat Mack 
(Revisited) 'The Other Side 'F-l r Strike Eagle 
•Championship Lode Runner "Gato V i .3 "I, 
Damiano "Wilderness "Golf s Best 'Feaiuns 
"The Enhanced Unenhanced 'e "Looking into 
Flight Simulator's L^^OS "Cc/v "Appavarex 
"Installing a RA,M disk into DOS 3.3 . . , . 



SLlftkey^ "Under Fire "Pegasus )( 
'Take I (revisited) 'Flight Simulator II vl ,05 
(part 3) "Magic Slate "Alter Ego "Rendezvous 
"Quicken "Story Tree "Assembly Language 
Tutor "Avalon Hill games 'Dark Crystal 
• Features 'Playing Karateka on a ,c 'Track 
Finder 'Sylk to Dit 'Cure "Breaking In: tips 
for beginners "Copy ][ Plus 6 0: a review^ "The 
DOS Alterer ..,,,,. .„ , . ... . . , 



Suftkeys "Flight Simulator II v 
1 .05 "AutoDuel "Critical Reading "Troll's Tale 
"Robot W'ar "General Manager 'Plasmania 
"Telarium Software 'Kidwriter v 1 ,0 'Color Me 
'Feuiurc.s •ScreenU'riter meets Flashcard "The 
Bus ,Monitor 'Mouscpainl tor non- Apples 
*Cun' "The Bard's Dressing Room 'APT 
'Championship Lode Runner 



Softkeys 'Olymbpic Decathlon 
"Hi res Cribbagc "Revisiting F- 1 5 Strike Eagle 
"Masquerade 'The Hobbit 'Pooyan 'The 
Perfect Score 'Alice in Wonderland 'The 
Money Manager "Good Thinking "Rescue 
Raiders *l-fMttn-: Putting a New F8 on Vour 
Language Card 'Con' •Exploring ProDOS by 
installng a CPS Clock Driver 



Si>f!ke\s •Crisis Mountain 
•Terripin Logo •,Apple Logo II 'Fishies 1,0 
• SpellWorks 'Gumball "Rescue at Rigel 
"Crazey Mazey 'Conan 'Perry Mason: The 
Case ol the .Mandarin Murder "Koronis Rift 
•Feature ",V<ore ROM Running *Core 
•tnfocom Revealed 



Softkevs 'Word Ju^ «| 
TonkI 'Sundog viO 'Gl Joe S Ltim hlmV 
Eidolon 'Summer Games II 'Thief 'fnstant 
Pascal "World's Greatest Football Game 
'Graphic Adventure " I "Sensible Grammar S 
Extended Bookends 'Chipwits 'Hardball 
"King s Quest II "The World's Greatest Baseball 
Game *FeMure "How to be the Sound Master 
• Core 'The Mapping of Ultima IV 



Available Back Issiaes 



SoflkeM "Revisiting Music 
Construction Set •Lutiil •Raudville Sciltwarc 
•Hartley Software •Bridge •Early Games for 
Young Cfiildren 'Tawala's Last Redoubt •Print 
Shop Companion •Kracking Vol II 'Mocbius 
•Mouse Budget, Mouse U'ord S Mouse Desk 
•Adventure Construction Set 'Femurc •Using 
Cfeta Disks With Microzines *Otrc 'Super lOB 
V 1 .5 a Reprint . . , > . t,.., ,,*, „,,,»*,_, , ^, 



^^ ], Sofrkcys • Trivia Fever •Ttie 
Original Boston Computer Diet 'Lifcsaver 
•Synergistic Software •Blaiing Paddies 
•Zardax •Time Zone •Tycoon •barttily 
Delights •Jingle Disk •Crystal Caverns 'Karate 
Champ *Fi-anm- ^^ Little Help With The 
Bards Tale 'Care •Black Box •Unrestricted 
Ampersand ...,..,,.-,.... , 



Softkey^ • Millionaire • SSI's 
RDOS • Fantavisiofi • Spy vs. Spy • 
Dragonworld • King's Quest • Mastering the 
SAT • Easy as ABC • Space Shuttle • The 
Factory • Visidex (. IE • Sherlock HDlmes • 
The Bards Tale • Fentuiv • Increasing Vour 
Disk Capacity • Cure * Uttimaker IV, an 
Ultima IV Character Editor 



Si/ftkevs • Threshold • Checkers 
v2. 1 • Microtype • Gen. £ Organic Chemistry 
Series • Uptown Trivia • .Murder by the Do^en 

• Windham's Classics • Batter Up • Evelyn 
Wood's Dynamic Reader • Jenny ot tlie Prairie 

• Learn Ahout Sounds in Reading • Winter 
Games • Fcolure • Customi;ing the Monitor 
by Adding 6 5 CO] Disassembly • Ct>re • The 
Animator 



Sofikcx:^ • Ultima IV • Robot 
Odyssey • Rendezvous • Word Attack S 
Classmate • Three from Mindscape • 
Alphabetic Keyboarding • Hacker • Disk 
Director • Lode Runner • MIDI(4 • Algebra 
Series • Time is Money • Pitstop II • Apventure 
to Atlantis • Fcantrc • Capturing the Hidden 
Archon tditor • Cfre • Fingerprint Plus: A 
Review • Beneath Beyond Castle Vt'olfenstein 
(pan 2) 



Sofikcvs • Microzines I -5 " 
Microzines 7 -9 | Microzines (alternate method) 
• Phi Beta Filer • Sword ol Kadash • Another 
Miner 30T9er • Learning With Fuzzywomp • 
Bookends • Apple Logo II • Murder on the 
Zindertieuf • Fvautrcs • Daleks: Exploring 
Artificial Intelligence • Making iZ¥, or IbK 
Slave Disks • Core • The Games ot 1935: part 
II..,...,,..,..,,..,... 



Si>fikt'\s • CannonbafI Blitz • 
Instant Recall • Gessler Spanish Software • 
More Stickybears • Financial Cookbook • 
Super Zaxxon • Wizardry • Preschool Fun • 
Holy Grail • Inca • I 2SK Zaxxon • !■ future 
• ProEdit • Core • Games of I9S5 part I 



SoftkeM • DB Master 4,2 • 
Business Writer • Barron's Computer SAT • 
Take I • Bank Street Speller • Where In The 
World Is Carmen Sandiego • Bank Street Writer 
nSK • Word Challenge • Spy's Demise • 
Mind Prober • BCs Quest For Tires • Early 
Games • Homeword Speller • Feature • 
Acfding IF THEN ELSE To Applesoft • Core • 
DOS To ProtX?S And Back 



Sojikeyi • Electronic Arts software 

• Grolier software • Xy phus • F- 1 5 Strike Eagle 

• Injured tngine • Mr Robot And His Robot 
Factory • Applecillin II • Alphabet Zoo • 
Fathoms 40 • Slory Maker • Early Games 
Matchmaker • Robots Of Dawn • Feature * 
Essential Data L>uplicator copy parm.s • Core 
•DOS-Direct Sector Access 



Softkexi • Choplifter • .Mutplot • 

Flashcalc • Karateka • Newsroom • E-Z Draw 

• Gato • Dino Eggs • Pinball Construction Set 

• TAC • The Print Shop: Graphics Library • 
Death In Ihe Caribbean • Ffuiuri", • Using 
A.R D. To Softkev Mars Cars • How To Be The 
Wrilemaster • Core • Wheel Of .Money. , 



Softkew • Miner 204 9er • Lode 
Runner • A2PB I Pinball • The Heist • Old 
Ironsides • Grandma's House • In Search ot 
the Most Amazing Thing • Morloc's Tower • 
Marauder • Sargon III • Feiitures • 
Customized Drive Speed Control • Super 108 
version 1.5 • Core • The Macro System. , 



Softkeys • Sargon III • Wizardry: 
Proving Grounds ot the .Mad Overlord and 
Kdight of Diamonds • The Report Card V I . I 

• Kidwriter • Feature • Apple ][ Boot ROM 
Disassembly • Core • The Graphic Grabber 
v3,0 • Copy 11+ 5,0: A Review • The Know- 
Drive: A Hardware Evaluation • An Improved 
BASIC. Binary Combo, , , , . , 

1 ^9 Softkeys • Rendezvous With 
Rama • Peachiree's Back To Basics Accounting 
System • HSD Statistics Series • Arithmetickle 

• Arilhmekieks and Early Games lor Children 

• Feuiures • Double Vour ROM Space • 
Towards a Better FS ROM • The Nibbler: A 
Utility Program to Examine Raw Nibbles From 
Disk • Core • The Games of 1984: In Review- 
part II 

1 VS Sofikey; " Sensible Speller (or 
Pro DOS • Sideways • Rescue Raiders • Sheila 

• Basic Building Blocks • Artsci Programs • 
Crossfire • Feature • Secret Weapon: 
RAMcard • Core • The Controller Writer • 
A Fix For The Beyond Castle Wolfenstein 
Softkey • The Lone Catalog Arranger 
Part I 



1 Softkev.s •Data Reporter • Multiplan 

• Zork • Feature!, * PARMS for Copy II Plus 

• No .More Bugs • API's for Choplifter & 
Cannonhall Blitz • 'Copyeurd' KevieKs • 
Replay • Crack shot • Snapshot • Wildcard 



Use the handy 
Order Form 
on the back. 



COMPUTIST BACK ISSUES ORDER FORM 



Are you missing a 
piece of tlie picture ?????? 



Ian Mag Disk Both 

$4.76 mi ims 

4V □ □ □ 

46 a iZ] □ 

45 □ □ D 

44 ...□□□ 

43 □ □ □ 

42 a □ □ 

41 □ □ □ 

40 □ □ □ 

39 □ □ □ 

38 nan 

37 □ □ □ 

36 nan 

3B □ □ □ 

34 n □ □ 

33 □ □ □ 

32 □ □ □ 

31 □ □ D 

30 □ □ □ 

29 □ □ □ 

28 □ □ n 

27 □ □ cn 

26 □ □ □ 

25 □ □ in 

24 □ tzi n 

• 23 □ n □ 

22 ana 

19 □ □ □ 

16 □ □ D 

• 7 " ." ." ."!."."!.'.'□[]□ 
Core 2 □ □! □ 

1 npin 

Core 1 □ U □ 

Computing 3 .... D * * 

B«ft of Hardcore Computing. . • n • 

Core Sp«lal Combo $10 I I 

JAM thrpe CORE Tnagozines] 

So^^ CiSks apph/ to Tcre than one issu* sJifl are stiown as Waller tjojes 
Specii Btjiti" tsiw & Tiagai n€ comarat-on ordef5 apply to one iss^e 
and rs cor'esponoing oisk 

A W& have a lirnited supply of ttiese issues 

* Back lasje is tio longer avaitab^e 



back issues and library disks are 
frequently referenced in current issues. 



Back Issues and Library Disk Rates 



US. Canada and Mexico back issue rate - $4.75 each. 
All other Foreign back issue rate - $8.75 each. 

US. Canada, Mexico library disk rate - $9.95 each. 
All other Foreign library disk rate - $11.94 each. 

"Both" disk and magazine rates for: 

US. Canada & Mexico - $12.95 each combination. 
All other Foreign - $18.95 each combination. 

Wlmi w a 2ilmm^ dvsk? 

A library disk iS a diskette that coniLiins programs that would iiormallv huve to be entered by 
ilie user. Documentation for each iihrary disk ean be iound in the corresponding i.ssue. 

• l,ibrar\' disks arc available tor all issues nt COMPl TIS I I thru 45. A de.seription of the softkeys 
and programs covered in each issue is available upon request. Please send your name and address 
along with a first class postage stamp (US 5 .221. 

^S^^K^E 3 Games: Conslructlng you- own Joyslick«Compilng Games- (■,.^.MA■fl;:1. 7F»;?; 

Ov«r 30o' the atest and best- Pick Of The Pac<. All-lime TOP 20 games* Deslructive Fort;es« EAMON» Graptiics Magician 
and GraFORTH* DragtJr Dungeon. ■ - 

Cr^VE^E 2 UtilileS: Dynamic Manu- High Res Scroll Demo* GOTO Label. Replace* Line 
Find- Quick Copy: Ct3py* ... .. .,.., 

CT^^K^E X Graphics; Memory Map* Text Graphics: Marquee* Boxes- Jagged Scroiler* Low 

Res. Color Chaiacter Chart- High Res. Screen Cruncher- The UFO Fai;tQry* Color* Vector Qrapmcs.Shimmenng Shapes- 
A Stiaae TatiSe Wim-Eclilor* Block Giaptiics Arcade Qualily Graphics for BASIC P'ogrammers* Animaiion 

llArdCOrC COnipUtin^ 3 HyperDOS creator- Menu Hello* Zyphyr Wars* Vector Graphics* 
Review of Bit Copiers- Bool Code Tracing* Soflkey lOB* Inierview with 'Mike' MarKkula ..... 



L Please send the back issues indicated: 



Please send the following library disks: 



Name. 



_ID#_ 



Address 

City 

Cojntry 



State 



Zip 



Phone 



Exp. 



Signature . 



CP48 



US funds drawn on US banks 



Senii chack or tnoney order to 

COMPUTIST 

PO Box 110346-1 

Tacoma, WA S841t. 

(206) 474-5750 

Most orders are shipped within 5 working oa/s, however please allow up 
10 4 weeks delivery for some oroers Most orders shipped UPS, aopiease 
use street address. Otter gcmd while supply lasts. In Washinglon state, 
add T.S'i's sales tax. 



Horn lo. lUtUe lo^i 

COMPUTIST 



COMPUTIST has wo basic sections: 
(i) (he new Readers Datu Exchange, and 
(2) Special reatures. 



R D Ex 

Readers Data Exchange 



The old INPUT and die READERS 
SOFTKEY AND COPY EXCHANGE have 
now been combined imo [he new Readers 
Data [exchange (or RD[-:k). All short 
softkeys. eonimems, short articles, 
questions, answers, fixes and bugs and 
almost any other information that must be 
prinLCd in a timciy tashion will be placed in 
the Readers Data Exchange. 

Although we will print letters and shorr 
article-s()ltke> submissions that are received 
as only printed text, wo would prefer that 
they be submilled on disk. Fur submission 
requirements, sec //ow To Get Published. 

We ni> longer purchase short softkeys- 
articles unJess thev merit being placed in the 
SPECIAL FEATURES section. 

COMPUTIST reserves the right to edit 
and publish any contribution {wheilier a 
letter-to-the -editor or short article- softkey) 
in the RDEx section, Al! published 
contributions become the property and are 
copyrighted as part of COMPUTIST. 



I 



HOW TO GET 
PUBLISHED 



COMPUTIST 
SPECIAL FEATURES 



Wc will purchase reature-lrn^lh 
original material on the following .subjects: 

1) Original program/article combinaiions; 

2) General anicles (Apple compunng); 
?>) Softkeys; 

4) Hardware modifications: 

6) DOS nitxlillcations. 
COMPUTIST pay s upon publication, 
depending upon the amount of editing and 
typeset length of the aniclc. from S20 to 
SlOO per article. 

Please suhmii completed manuscripts 
directly; do not send queries. Previously 
published material and simultaneous 
submissions will not be purchased. 



Whether you are contributing data to the 
new Readers Data E.xchange or if you feel 
your submission is W'Orthy of being 
published as a Special Fea lures, we urge you 
to follow thc-se guidelines and please 
PLEASE send contributions and 
submissions on disk as well as on paper! 

All contributions-submissions should be 
submitted in BOTH printed and disk 
formats. Your printout mu.si u.se only one 
side of the paper. I'ext should be double- 
spaced using a non-compressed font with 
both upper and lower case. A letter qualit; 
mixte IS preferred, with each page torn at 
the perforation only. Pages need not be 
stapled together, The first page should 
contain the following data: 

Tn LK OK WORK 

FULL NAME OF ALTHOR 

ADDRESS 

PHONE M'MBER 

Each page of the manuscript and 
program listing should include the author's 
name, the title of the work, and the page 
number in the upper right hand corner. 

The article and any accompanying 
program should be submitted as a .standard 
ttxt filf on a DOS 3,3 disk. Label the disk 
with the title of the work and the author's 
full name and address, ON DISK, TEXT 
MUST BE SINGLE-SPACED ONLY. 
Please identify your editing program. 

Disks arc alway.s returned as soon a.s 
possible Other materials will be returned 
only when adequate return packaging and 
postage is enclosed. We are not responsible 
for unretumed submissions. 



HINTS ON 
WRITING STYLES 



A. Always assume that your reader is a 
novice and explain all buzzwords and 
technical jargon. Pay special attention to 
grammar and punctuation; we require 
technical competence but also good, 
readable style. 



H. A list of hardware and software 
Requirements should be included at the 
beginning of the manuscript. When 
published, this list will be offset from the 
main text, 

C. Include the manufacturer's or publisher's 
name when a commercial program or 
product is mentioned. 

D, When submitting your own programs, 
first introduce the purpose of the program 
and features of special interest. Include 
background information describing its use. 
Tips for advanced uses, program 
modilications. and utilities can also be 
included. Avoid long print statements and 
use TABs instead of spaces. 

Rcmembir: A beginner should be able to 
type the program with case. A program will 
not accepted for publication without an 
accompanying article. These articles, as well 
as articles on hardware and DOS 
modifications MUST summarize the action 
of the main routines and include a fully 
remarked listing. 

F. GENERAL ARTICLES may include 
advanced tips, tutorials, and explorations of 
a particular aspect of ./Vppie computing. 

G. SOFTKEYS must contain detailed step- 
by-step procedures. For each softkey, first 
introduce the locking technique used and 
then give preci.se .steps to unlock the copy- 
protected program. Number each step. We 
accept articles which explain locking 
techniques used in several programs 
published by the same company. 

H. APTs or ADVANCED PLAYING 
TECHNIQUES can deal with alterations to 
a program, deleting annoying sounds, 
acquiring more points in play and avoiding 
hazards. Again, provide step-by-step 
instructions to complete each APT and 
explain each step's tltnction. 

Please mail aU letters, short articles and 
softkeys to the RDt^X EdUnr. These w ill be 
IMMEDLATELY edited, typset and entered 
into the Readers Data Exchange. Remember 
tliat we cannot purchase diese contributions. 
Feature-length articles should he .sent to the 
h't'tilun's Ediior. You will be noiilleid of the 
statusd of your submission within 6 to 8 
weeks alter it is received. 

COMPUTIST 

POBox 110846-T 

Tacoma, WA 98411 



ALL of our Super lOB controllers (through 1986) in ONE package! 



■ COMPUTiST developed the ultimate copy program to 
remove copy protection Irom software: 

The Super lOB program. 

Since the introduction of Super lOB, COMPUTIST has used 
this flexible program to deprotect (or partially deprotect) 
dozens of commercial programs with far ranging protection 
schemes. 

Super tOB deprotects disi<s by using a modified RWTS (the 
subroutine in DOS which is responsible for the reading and 
writing of disk sectors) for reading from the protected disk and 
then using a normal RWTS tor writing to the deprotected disk. 

This package contains: 

^ TWO DISKS (supplied in DOS 3.3). Each disk contains at least 
60 Super lOB Controllers including ttie standard, swap, newswap 
and fast controllers. Also included is version 1 .5 of Super lOB, the 
Csaver program from COMPUTIST No, 13, and a Menu Hello 
Program that iisis the available controllers and, when you select one, 
automatically installs it in Super lOB and RUNs the resulting 
program* 

► A reprint of Disk Inspection and the Use of Super lOB, from 
COMPUTIST No. 17. This article explains how to write your own 
Super lOB controllers, 

►- COMPUTiST No. 32, which contains an extensive article detailing 
the hows and whys of Super lOB v1.5 and at least 5 articles using 
the new Super lOB program. 

• Several of the controllers deprotect the software completely with 
no further steps. This means that some programs are only minutes 
away from deprotection (with virtually no typing). 

• The issue of COMPUTIST in which each controller appeared 
is indicated in case further steps are required to deprotect a particular 
program." 



The SUPER lOB Collection 

Volume 1 o1 the Supef lOB collection covers ail ihe controllers from 
COMPUTIST No. 9 through No 26. Also incljded are Ihe newswap anO 
fast conlrollers Irom COMPUTIST No. 32 The following 60 controllers are 
on volume 1 

Advanced Blackjack. Alphabet Zoo, Arcade Machine, Archor II, 

Archon, Artsci Software. Bank Street Writer, Barrons SAT, Beyond 

Castle Wcllenstein, BSW /,'c Loader, Castle Wolfenstein, Computer 

Preparation: SAT, Dazzle Draw, DB Master 4 Plus. Death in the 

Carnbear, Dmo Eggs. DLM Software, Electronic Arts. F-15 Strike 

Eagle, Fast Controller, Fathoms 40, Financial CookbooK, Gessler 

Software, Grafrdma's House The Heist, In Search of the Most 

Amazing Thing, Instant Recall. Kidwnler, Lions Share, Lode 

Runner, Mastertype, Match Maker. Mine? 2049er. Minit Man, 

Mutplot, Newsroom. Newswap conlroiler. Penguin Software, Print 

Shop Graphic Library, Print Shop, Rendezvous with Ranna, Rockys' 

Boots. Sargon III, Sea Dragon, Shiela, SKytax, Snooper Troops, 

Slandard controller. Stoneware Software, Summer Games, Super 

Controller, Super Zaxxon. Swap Controller, TAG, Ultima III, Word 

Challenge, Xyphus. Zaxxon 

Volume 2 of the super lOB collection covers all the controllers Irom 
COMPUTIST No. 27 through No, 36, The following 65 conlrollers are on 
volume 2'. 

Alice in Wonderland, Alphabalic Kayboarding, Alternate Reality, 

AutoduBl, Checkers, Chipwits. Color Me. Conan.dala, Conan prog, 

CopyDOS. Crisis Mountain. Disx Director, Dragonworld, Early 

Games, Easy as ABC F-15 Strike Eagle. Fantavision, Fast 

controller, Fisfties, Fhght Simjialor, Halley Project, Hartley Software 

(a). Hartley Software (b), Jenny of he Prarie, Jingle Disk, Kidwriler, 

Kracking Vol II. Lode Runner, LOGO II (a), LOGO II (b). 
Masquerade. Mastering Ihe SAT, Microlype The Wonderful World 
of Paws, Micrczines 1, Microzmes 2-5, Miner 2049er. Mist & View 

to a Kill, Murder on the Zinderneuf, Music Construction Set. 

Newswap controller, Olympic Decathlon Other Side, Phi Beta Filer, 

Pitstop II. PnnI Shop Companion, RDOS. Robot War, Spy vs Spy, 

Standard controller, Sundog V2, Swap controller. Sword Of Kadash. 

Synergistic Sollware, Tawala's last Redoubt, Terripin Logo, 

Threshold, Time is f/loney, Time Zone, Tink! Tonk!, Troil's Tale, 

Ultima IV, Wilderness, Word Attack a Classmate, World's Greatest 

Baseball, World's Greatest Football 



Yes. plea.se send me The Super lOB Colleelinn 

jiifludes both disks with Super lt)B version 1.5. 
COMPUTIST32. PLUS a reprint of 'Disk Inspection and 
the Use of Super lOB" 

lJ LS'Canada/Mexicn for S 16.00 

[J Other Foreign for $20.00 

Send to: Super lOB CoUeclion 

PO Box 110846-1 
Taconia, \SK mXW 

(206) 474-5750 

■•Rcqiiirw at IciLst (>4K ol nsctiwr). 

''''.Alttit>Uj!h iionit CLinlrolkt^ will tompletcl) deprotect ttve pmgram 
[hc\ ui-rt' designeJ for. Mime wiil mil. and therefore require their 
L-orVcspondirig ivwc ot'COfylPUTiST to ^onipleti the JepnnectKm 
priced u,re. 



Name. 



_ID*_ 



Address 
Cilv 



State 



Zip 



Countrj 

SO 

Signature . 



_ Phonc_ 



Esp. 



CP4K 



Most orders are shipped mithm ."i worlung days, however, plea.sc allow 

4 to 6 weeks for delivcrv, Washington re.sidents. please add 7,S^ sales tax 

IK furHl\ drawn on L'S banks 



